Jul 15 11:49:07.661433 kernel: Linux version 5.15.188-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Jul 15 10:04:37 -00 2025 Jul 15 11:49:07.661449 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:49:07.661456 kernel: Disabled fast string operations Jul 15 11:49:07.661460 kernel: BIOS-provided physical RAM map: Jul 15 11:49:07.661463 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ebff] usable Jul 15 11:49:07.661467 kernel: BIOS-e820: [mem 0x000000000009ec00-0x000000000009ffff] reserved Jul 15 11:49:07.661473 kernel: BIOS-e820: [mem 0x00000000000dc000-0x00000000000fffff] reserved Jul 15 11:49:07.661477 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007fedffff] usable Jul 15 11:49:07.661481 kernel: BIOS-e820: [mem 0x000000007fee0000-0x000000007fefefff] ACPI data Jul 15 11:49:07.661485 kernel: BIOS-e820: [mem 0x000000007feff000-0x000000007fefffff] ACPI NVS Jul 15 11:49:07.661489 kernel: BIOS-e820: [mem 0x000000007ff00000-0x000000007fffffff] usable Jul 15 11:49:07.661493 kernel: BIOS-e820: [mem 0x00000000f0000000-0x00000000f7ffffff] reserved Jul 15 11:49:07.661497 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec0ffff] reserved Jul 15 11:49:07.661513 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved Jul 15 11:49:07.661521 kernel: BIOS-e820: [mem 0x00000000fffe0000-0x00000000ffffffff] reserved Jul 15 11:49:07.661526 kernel: NX (Execute Disable) protection: active Jul 15 11:49:07.661530 kernel: SMBIOS 2.7 present. Jul 15 11:49:07.661535 kernel: DMI: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020 Jul 15 11:49:07.661539 kernel: vmware: hypercall mode: 0x00 Jul 15 11:49:07.661543 kernel: Hypervisor detected: VMware Jul 15 11:49:07.661549 kernel: vmware: TSC freq read from hypervisor : 3408.000 MHz Jul 15 11:49:07.661553 kernel: vmware: Host bus clock speed read from hypervisor : 66000000 Hz Jul 15 11:49:07.661557 kernel: vmware: using clock offset of 3862408209 ns Jul 15 11:49:07.661562 kernel: tsc: Detected 3408.000 MHz processor Jul 15 11:49:07.661567 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 15 11:49:07.661572 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 15 11:49:07.661576 kernel: last_pfn = 0x80000 max_arch_pfn = 0x400000000 Jul 15 11:49:07.661581 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 15 11:49:07.661585 kernel: total RAM covered: 3072M Jul 15 11:49:07.661591 kernel: Found optimal setting for mtrr clean up Jul 15 11:49:07.661596 kernel: gran_size: 64K chunk_size: 64K num_reg: 2 lose cover RAM: 0G Jul 15 11:49:07.661601 kernel: Using GB pages for direct mapping Jul 15 11:49:07.661605 kernel: ACPI: Early table checksum verification disabled Jul 15 11:49:07.661609 kernel: ACPI: RSDP 0x00000000000F6A00 000024 (v02 PTLTD ) Jul 15 11:49:07.661614 kernel: ACPI: XSDT 0x000000007FEE965B 00005C (v01 INTEL 440BX 06040000 VMW 01324272) Jul 15 11:49:07.661618 kernel: ACPI: FACP 0x000000007FEFEE73 0000F4 (v04 INTEL 440BX 06040000 PTL 000F4240) Jul 15 11:49:07.661623 kernel: ACPI: DSDT 0x000000007FEEAD55 01411E (v01 PTLTD Custom 06040000 MSFT 03000001) Jul 15 11:49:07.661627 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 15 11:49:07.661632 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 15 11:49:07.661637 kernel: ACPI: BOOT 0x000000007FEEAD2D 000028 (v01 PTLTD $SBFTBL$ 06040000 LTP 00000001) Jul 15 11:49:07.661644 kernel: ACPI: APIC 0x000000007FEEA5EB 000742 (v01 PTLTD ? APIC 06040000 LTP 00000000) Jul 15 11:49:07.661649 kernel: ACPI: MCFG 0x000000007FEEA5AF 00003C (v01 PTLTD $PCITBL$ 06040000 LTP 00000001) Jul 15 11:49:07.661654 kernel: ACPI: SRAT 0x000000007FEE9757 0008A8 (v02 VMWARE MEMPLUG 06040000 VMW 00000001) Jul 15 11:49:07.661659 kernel: ACPI: HPET 0x000000007FEE971F 000038 (v01 VMWARE VMW HPET 06040000 VMW 00000001) Jul 15 11:49:07.661664 kernel: ACPI: WAET 0x000000007FEE96F7 000028 (v01 VMWARE VMW WAET 06040000 VMW 00000001) Jul 15 11:49:07.661669 kernel: ACPI: Reserving FACP table memory at [mem 0x7fefee73-0x7fefef66] Jul 15 11:49:07.661674 kernel: ACPI: Reserving DSDT table memory at [mem 0x7feead55-0x7fefee72] Jul 15 11:49:07.661679 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 15 11:49:07.661684 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 15 11:49:07.661689 kernel: ACPI: Reserving BOOT table memory at [mem 0x7feead2d-0x7feead54] Jul 15 11:49:07.661694 kernel: ACPI: Reserving APIC table memory at [mem 0x7feea5eb-0x7feead2c] Jul 15 11:49:07.661698 kernel: ACPI: Reserving MCFG table memory at [mem 0x7feea5af-0x7feea5ea] Jul 15 11:49:07.661703 kernel: ACPI: Reserving SRAT table memory at [mem 0x7fee9757-0x7fee9ffe] Jul 15 11:49:07.661709 kernel: ACPI: Reserving HPET table memory at [mem 0x7fee971f-0x7fee9756] Jul 15 11:49:07.661714 kernel: ACPI: Reserving WAET table memory at [mem 0x7fee96f7-0x7fee971e] Jul 15 11:49:07.661719 kernel: system APIC only can use physical flat Jul 15 11:49:07.661723 kernel: Setting APIC routing to physical flat. Jul 15 11:49:07.661728 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Jul 15 11:49:07.661733 kernel: SRAT: PXM 0 -> APIC 0x02 -> Node 0 Jul 15 11:49:07.661738 kernel: SRAT: PXM 0 -> APIC 0x04 -> Node 0 Jul 15 11:49:07.661743 kernel: SRAT: PXM 0 -> APIC 0x06 -> Node 0 Jul 15 11:49:07.661747 kernel: SRAT: PXM 0 -> APIC 0x08 -> Node 0 Jul 15 11:49:07.661753 kernel: SRAT: PXM 0 -> APIC 0x0a -> Node 0 Jul 15 11:49:07.661758 kernel: SRAT: PXM 0 -> APIC 0x0c -> Node 0 Jul 15 11:49:07.661762 kernel: SRAT: PXM 0 -> APIC 0x0e -> Node 0 Jul 15 11:49:07.661767 kernel: SRAT: PXM 0 -> APIC 0x10 -> Node 0 Jul 15 11:49:07.661772 kernel: SRAT: PXM 0 -> APIC 0x12 -> Node 0 Jul 15 11:49:07.661776 kernel: SRAT: PXM 0 -> APIC 0x14 -> Node 0 Jul 15 11:49:07.661781 kernel: SRAT: PXM 0 -> APIC 0x16 -> Node 0 Jul 15 11:49:07.661786 kernel: SRAT: PXM 0 -> APIC 0x18 -> Node 0 Jul 15 11:49:07.661791 kernel: SRAT: PXM 0 -> APIC 0x1a -> Node 0 Jul 15 11:49:07.661795 kernel: SRAT: PXM 0 -> APIC 0x1c -> Node 0 Jul 15 11:49:07.661801 kernel: SRAT: PXM 0 -> APIC 0x1e -> Node 0 Jul 15 11:49:07.661806 kernel: SRAT: PXM 0 -> APIC 0x20 -> Node 0 Jul 15 11:49:07.661811 kernel: SRAT: PXM 0 -> APIC 0x22 -> Node 0 Jul 15 11:49:07.661816 kernel: SRAT: PXM 0 -> APIC 0x24 -> Node 0 Jul 15 11:49:07.661820 kernel: SRAT: PXM 0 -> APIC 0x26 -> Node 0 Jul 15 11:49:07.661825 kernel: SRAT: PXM 0 -> APIC 0x28 -> Node 0 Jul 15 11:49:07.661830 kernel: SRAT: PXM 0 -> APIC 0x2a -> Node 0 Jul 15 11:49:07.661835 kernel: SRAT: PXM 0 -> APIC 0x2c -> Node 0 Jul 15 11:49:07.661839 kernel: SRAT: PXM 0 -> APIC 0x2e -> Node 0 Jul 15 11:49:07.661844 kernel: SRAT: PXM 0 -> APIC 0x30 -> Node 0 Jul 15 11:49:07.661850 kernel: SRAT: PXM 0 -> APIC 0x32 -> Node 0 Jul 15 11:49:07.661854 kernel: SRAT: PXM 0 -> APIC 0x34 -> Node 0 Jul 15 11:49:07.661859 kernel: SRAT: PXM 0 -> APIC 0x36 -> Node 0 Jul 15 11:49:07.661864 kernel: SRAT: PXM 0 -> APIC 0x38 -> Node 0 Jul 15 11:49:07.661869 kernel: SRAT: PXM 0 -> APIC 0x3a -> Node 0 Jul 15 11:49:07.661873 kernel: SRAT: PXM 0 -> APIC 0x3c -> Node 0 Jul 15 11:49:07.661878 kernel: SRAT: PXM 0 -> APIC 0x3e -> Node 0 Jul 15 11:49:07.661883 kernel: SRAT: PXM 0 -> APIC 0x40 -> Node 0 Jul 15 11:49:07.661888 kernel: SRAT: PXM 0 -> APIC 0x42 -> Node 0 Jul 15 11:49:07.661893 kernel: SRAT: PXM 0 -> APIC 0x44 -> Node 0 Jul 15 11:49:07.661898 kernel: SRAT: PXM 0 -> APIC 0x46 -> Node 0 Jul 15 11:49:07.661903 kernel: SRAT: PXM 0 -> APIC 0x48 -> Node 0 Jul 15 11:49:07.661908 kernel: SRAT: PXM 0 -> APIC 0x4a -> Node 0 Jul 15 11:49:07.661913 kernel: SRAT: PXM 0 -> APIC 0x4c -> Node 0 Jul 15 11:49:07.661917 kernel: SRAT: PXM 0 -> APIC 0x4e -> Node 0 Jul 15 11:49:07.661922 kernel: SRAT: PXM 0 -> APIC 0x50 -> Node 0 Jul 15 11:49:07.661927 kernel: SRAT: PXM 0 -> APIC 0x52 -> Node 0 Jul 15 11:49:07.661932 kernel: SRAT: PXM 0 -> APIC 0x54 -> Node 0 Jul 15 11:49:07.661936 kernel: SRAT: PXM 0 -> APIC 0x56 -> Node 0 Jul 15 11:49:07.661941 kernel: SRAT: PXM 0 -> APIC 0x58 -> Node 0 Jul 15 11:49:07.661947 kernel: SRAT: PXM 0 -> APIC 0x5a -> Node 0 Jul 15 11:49:07.661952 kernel: SRAT: PXM 0 -> APIC 0x5c -> Node 0 Jul 15 11:49:07.661956 kernel: SRAT: PXM 0 -> APIC 0x5e -> Node 0 Jul 15 11:49:07.661961 kernel: SRAT: PXM 0 -> APIC 0x60 -> Node 0 Jul 15 11:49:07.661966 kernel: SRAT: PXM 0 -> APIC 0x62 -> Node 0 Jul 15 11:49:07.661970 kernel: SRAT: PXM 0 -> APIC 0x64 -> Node 0 Jul 15 11:49:07.661975 kernel: SRAT: PXM 0 -> APIC 0x66 -> Node 0 Jul 15 11:49:07.661980 kernel: SRAT: PXM 0 -> APIC 0x68 -> Node 0 Jul 15 11:49:07.661985 kernel: SRAT: PXM 0 -> APIC 0x6a -> Node 0 Jul 15 11:49:07.661990 kernel: SRAT: PXM 0 -> APIC 0x6c -> Node 0 Jul 15 11:49:07.661995 kernel: SRAT: PXM 0 -> APIC 0x6e -> Node 0 Jul 15 11:49:07.662000 kernel: SRAT: PXM 0 -> APIC 0x70 -> Node 0 Jul 15 11:49:07.662005 kernel: SRAT: PXM 0 -> APIC 0x72 -> Node 0 Jul 15 11:49:07.662010 kernel: SRAT: PXM 0 -> APIC 0x74 -> Node 0 Jul 15 11:49:07.662014 kernel: SRAT: PXM 0 -> APIC 0x76 -> Node 0 Jul 15 11:49:07.662020 kernel: SRAT: PXM 0 -> APIC 0x78 -> Node 0 Jul 15 11:49:07.662028 kernel: SRAT: PXM 0 -> APIC 0x7a -> Node 0 Jul 15 11:49:07.662034 kernel: SRAT: PXM 0 -> APIC 0x7c -> Node 0 Jul 15 11:49:07.662039 kernel: SRAT: PXM 0 -> APIC 0x7e -> Node 0 Jul 15 11:49:07.662044 kernel: SRAT: PXM 0 -> APIC 0x80 -> Node 0 Jul 15 11:49:07.662050 kernel: SRAT: PXM 0 -> APIC 0x82 -> Node 0 Jul 15 11:49:07.662055 kernel: SRAT: PXM 0 -> APIC 0x84 -> Node 0 Jul 15 11:49:07.662060 kernel: SRAT: PXM 0 -> APIC 0x86 -> Node 0 Jul 15 11:49:07.662065 kernel: SRAT: PXM 0 -> APIC 0x88 -> Node 0 Jul 15 11:49:07.662070 kernel: SRAT: PXM 0 -> APIC 0x8a -> Node 0 Jul 15 11:49:07.662075 kernel: SRAT: PXM 0 -> APIC 0x8c -> Node 0 Jul 15 11:49:07.662080 kernel: SRAT: PXM 0 -> APIC 0x8e -> Node 0 Jul 15 11:49:07.662085 kernel: SRAT: PXM 0 -> APIC 0x90 -> Node 0 Jul 15 11:49:07.662091 kernel: SRAT: PXM 0 -> APIC 0x92 -> Node 0 Jul 15 11:49:07.662096 kernel: SRAT: PXM 0 -> APIC 0x94 -> Node 0 Jul 15 11:49:07.662101 kernel: SRAT: PXM 0 -> APIC 0x96 -> Node 0 Jul 15 11:49:07.662106 kernel: SRAT: PXM 0 -> APIC 0x98 -> Node 0 Jul 15 11:49:07.662111 kernel: SRAT: PXM 0 -> APIC 0x9a -> Node 0 Jul 15 11:49:07.662116 kernel: SRAT: PXM 0 -> APIC 0x9c -> Node 0 Jul 15 11:49:07.662121 kernel: SRAT: PXM 0 -> APIC 0x9e -> Node 0 Jul 15 11:49:07.662126 kernel: SRAT: PXM 0 -> APIC 0xa0 -> Node 0 Jul 15 11:49:07.662131 kernel: SRAT: PXM 0 -> APIC 0xa2 -> Node 0 Jul 15 11:49:07.662138 kernel: SRAT: PXM 0 -> APIC 0xa4 -> Node 0 Jul 15 11:49:07.662143 kernel: SRAT: PXM 0 -> APIC 0xa6 -> Node 0 Jul 15 11:49:07.662148 kernel: SRAT: PXM 0 -> APIC 0xa8 -> Node 0 Jul 15 11:49:07.662153 kernel: SRAT: PXM 0 -> APIC 0xaa -> Node 0 Jul 15 11:49:07.662158 kernel: SRAT: PXM 0 -> APIC 0xac -> Node 0 Jul 15 11:49:07.662163 kernel: SRAT: PXM 0 -> APIC 0xae -> Node 0 Jul 15 11:49:07.662168 kernel: SRAT: PXM 0 -> APIC 0xb0 -> Node 0 Jul 15 11:49:07.662173 kernel: SRAT: PXM 0 -> APIC 0xb2 -> Node 0 Jul 15 11:49:07.662178 kernel: SRAT: PXM 0 -> APIC 0xb4 -> Node 0 Jul 15 11:49:07.662183 kernel: SRAT: PXM 0 -> APIC 0xb6 -> Node 0 Jul 15 11:49:07.662189 kernel: SRAT: PXM 0 -> APIC 0xb8 -> Node 0 Jul 15 11:49:07.662194 kernel: SRAT: PXM 0 -> APIC 0xba -> Node 0 Jul 15 11:49:07.662199 kernel: SRAT: PXM 0 -> APIC 0xbc -> Node 0 Jul 15 11:49:07.662204 kernel: SRAT: PXM 0 -> APIC 0xbe -> Node 0 Jul 15 11:49:07.662209 kernel: SRAT: PXM 0 -> APIC 0xc0 -> Node 0 Jul 15 11:49:07.662214 kernel: SRAT: PXM 0 -> APIC 0xc2 -> Node 0 Jul 15 11:49:07.662219 kernel: SRAT: PXM 0 -> APIC 0xc4 -> Node 0 Jul 15 11:49:07.662225 kernel: SRAT: PXM 0 -> APIC 0xc6 -> Node 0 Jul 15 11:49:07.662230 kernel: SRAT: PXM 0 -> APIC 0xc8 -> Node 0 Jul 15 11:49:07.662235 kernel: SRAT: PXM 0 -> APIC 0xca -> Node 0 Jul 15 11:49:07.662241 kernel: SRAT: PXM 0 -> APIC 0xcc -> Node 0 Jul 15 11:49:07.662246 kernel: SRAT: PXM 0 -> APIC 0xce -> Node 0 Jul 15 11:49:07.662251 kernel: SRAT: PXM 0 -> APIC 0xd0 -> Node 0 Jul 15 11:49:07.662256 kernel: SRAT: PXM 0 -> APIC 0xd2 -> Node 0 Jul 15 11:49:07.662261 kernel: SRAT: PXM 0 -> APIC 0xd4 -> Node 0 Jul 15 11:49:07.662266 kernel: SRAT: PXM 0 -> APIC 0xd6 -> Node 0 Jul 15 11:49:07.662271 kernel: SRAT: PXM 0 -> APIC 0xd8 -> Node 0 Jul 15 11:49:07.662276 kernel: SRAT: PXM 0 -> APIC 0xda -> Node 0 Jul 15 11:49:07.662281 kernel: SRAT: PXM 0 -> APIC 0xdc -> Node 0 Jul 15 11:49:07.662286 kernel: SRAT: PXM 0 -> APIC 0xde -> Node 0 Jul 15 11:49:07.662292 kernel: SRAT: PXM 0 -> APIC 0xe0 -> Node 0 Jul 15 11:49:07.662297 kernel: SRAT: PXM 0 -> APIC 0xe2 -> Node 0 Jul 15 11:49:07.662302 kernel: SRAT: PXM 0 -> APIC 0xe4 -> Node 0 Jul 15 11:49:07.662307 kernel: SRAT: PXM 0 -> APIC 0xe6 -> Node 0 Jul 15 11:49:07.662312 kernel: SRAT: PXM 0 -> APIC 0xe8 -> Node 0 Jul 15 11:49:07.662317 kernel: SRAT: PXM 0 -> APIC 0xea -> Node 0 Jul 15 11:49:07.662323 kernel: SRAT: PXM 0 -> APIC 0xec -> Node 0 Jul 15 11:49:07.662328 kernel: SRAT: PXM 0 -> APIC 0xee -> Node 0 Jul 15 11:49:07.662333 kernel: SRAT: PXM 0 -> APIC 0xf0 -> Node 0 Jul 15 11:49:07.662338 kernel: SRAT: PXM 0 -> APIC 0xf2 -> Node 0 Jul 15 11:49:07.662344 kernel: SRAT: PXM 0 -> APIC 0xf4 -> Node 0 Jul 15 11:49:07.662352 kernel: SRAT: PXM 0 -> APIC 0xf6 -> Node 0 Jul 15 11:49:07.662358 kernel: SRAT: PXM 0 -> APIC 0xf8 -> Node 0 Jul 15 11:49:07.662363 kernel: SRAT: PXM 0 -> APIC 0xfa -> Node 0 Jul 15 11:49:07.662368 kernel: SRAT: PXM 0 -> APIC 0xfc -> Node 0 Jul 15 11:49:07.662373 kernel: SRAT: PXM 0 -> APIC 0xfe -> Node 0 Jul 15 11:49:07.662378 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] Jul 15 11:49:07.662383 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] Jul 15 11:49:07.662388 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000-0xbfffffff] hotplug Jul 15 11:49:07.662395 kernel: NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7fffffff] -> [mem 0x00000000-0x7fffffff] Jul 15 11:49:07.662400 kernel: NODE_DATA(0) allocated [mem 0x7fffa000-0x7fffffff] Jul 15 11:49:07.662406 kernel: Zone ranges: Jul 15 11:49:07.662411 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 15 11:49:07.662416 kernel: DMA32 [mem 0x0000000001000000-0x000000007fffffff] Jul 15 11:49:07.662421 kernel: Normal empty Jul 15 11:49:07.662427 kernel: Movable zone start for each node Jul 15 11:49:07.662432 kernel: Early memory node ranges Jul 15 11:49:07.662437 kernel: node 0: [mem 0x0000000000001000-0x000000000009dfff] Jul 15 11:49:07.662442 kernel: node 0: [mem 0x0000000000100000-0x000000007fedffff] Jul 15 11:49:07.662448 kernel: node 0: [mem 0x000000007ff00000-0x000000007fffffff] Jul 15 11:49:07.662453 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007fffffff] Jul 15 11:49:07.662459 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 15 11:49:07.662464 kernel: On node 0, zone DMA: 98 pages in unavailable ranges Jul 15 11:49:07.662469 kernel: On node 0, zone DMA32: 32 pages in unavailable ranges Jul 15 11:49:07.662474 kernel: ACPI: PM-Timer IO Port: 0x1008 Jul 15 11:49:07.662479 kernel: system APIC only can use physical flat Jul 15 11:49:07.662484 kernel: ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1]) Jul 15 11:49:07.662489 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Jul 15 11:49:07.662495 kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Jul 15 11:49:07.662601 kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Jul 15 11:49:07.662608 kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Jul 15 11:49:07.662613 kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Jul 15 11:49:07.662619 kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Jul 15 11:49:07.662624 kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Jul 15 11:49:07.662629 kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Jul 15 11:49:07.662634 kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Jul 15 11:49:07.662639 kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Jul 15 11:49:07.662644 kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Jul 15 11:49:07.662651 kernel: ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) Jul 15 11:49:07.662656 kernel: ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) Jul 15 11:49:07.662662 kernel: ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) Jul 15 11:49:07.662667 kernel: ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) Jul 15 11:49:07.662672 kernel: ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) Jul 15 11:49:07.662677 kernel: ACPI: LAPIC_NMI (acpi_id[0x11] high edge lint[0x1]) Jul 15 11:49:07.662682 kernel: ACPI: LAPIC_NMI (acpi_id[0x12] high edge lint[0x1]) Jul 15 11:49:07.662687 kernel: ACPI: LAPIC_NMI (acpi_id[0x13] high edge lint[0x1]) Jul 15 11:49:07.662693 kernel: ACPI: LAPIC_NMI (acpi_id[0x14] high edge lint[0x1]) Jul 15 11:49:07.662699 kernel: ACPI: LAPIC_NMI (acpi_id[0x15] high edge lint[0x1]) Jul 15 11:49:07.662704 kernel: ACPI: LAPIC_NMI (acpi_id[0x16] high edge lint[0x1]) Jul 15 11:49:07.662709 kernel: ACPI: LAPIC_NMI (acpi_id[0x17] high edge lint[0x1]) Jul 15 11:49:07.662715 kernel: ACPI: LAPIC_NMI (acpi_id[0x18] high edge lint[0x1]) Jul 15 11:49:07.662720 kernel: ACPI: LAPIC_NMI (acpi_id[0x19] high edge lint[0x1]) Jul 15 11:49:07.662725 kernel: ACPI: LAPIC_NMI (acpi_id[0x1a] high edge lint[0x1]) Jul 15 11:49:07.662730 kernel: ACPI: LAPIC_NMI (acpi_id[0x1b] high edge lint[0x1]) Jul 15 11:49:07.662735 kernel: ACPI: LAPIC_NMI (acpi_id[0x1c] high edge lint[0x1]) Jul 15 11:49:07.662740 kernel: ACPI: LAPIC_NMI (acpi_id[0x1d] high edge lint[0x1]) Jul 15 11:49:07.662746 kernel: ACPI: LAPIC_NMI (acpi_id[0x1e] high edge lint[0x1]) Jul 15 11:49:07.662751 kernel: ACPI: LAPIC_NMI (acpi_id[0x1f] high edge lint[0x1]) Jul 15 11:49:07.662757 kernel: ACPI: LAPIC_NMI (acpi_id[0x20] high edge lint[0x1]) Jul 15 11:49:07.662762 kernel: ACPI: LAPIC_NMI (acpi_id[0x21] high edge lint[0x1]) Jul 15 11:49:07.662767 kernel: ACPI: LAPIC_NMI (acpi_id[0x22] high edge lint[0x1]) Jul 15 11:49:07.662772 kernel: ACPI: LAPIC_NMI (acpi_id[0x23] high edge lint[0x1]) Jul 15 11:49:07.662777 kernel: ACPI: LAPIC_NMI (acpi_id[0x24] high edge lint[0x1]) Jul 15 11:49:07.662782 kernel: ACPI: LAPIC_NMI (acpi_id[0x25] high edge lint[0x1]) Jul 15 11:49:07.662787 kernel: ACPI: LAPIC_NMI (acpi_id[0x26] high edge lint[0x1]) Jul 15 11:49:07.662793 kernel: ACPI: LAPIC_NMI (acpi_id[0x27] high edge lint[0x1]) Jul 15 11:49:07.662799 kernel: ACPI: LAPIC_NMI (acpi_id[0x28] high edge lint[0x1]) Jul 15 11:49:07.662804 kernel: ACPI: LAPIC_NMI (acpi_id[0x29] high edge lint[0x1]) Jul 15 11:49:07.662809 kernel: ACPI: LAPIC_NMI (acpi_id[0x2a] high edge lint[0x1]) Jul 15 11:49:07.662814 kernel: ACPI: LAPIC_NMI (acpi_id[0x2b] high edge lint[0x1]) Jul 15 11:49:07.662819 kernel: ACPI: LAPIC_NMI (acpi_id[0x2c] high edge lint[0x1]) Jul 15 11:49:07.662824 kernel: ACPI: LAPIC_NMI (acpi_id[0x2d] high edge lint[0x1]) Jul 15 11:49:07.662830 kernel: ACPI: LAPIC_NMI (acpi_id[0x2e] high edge lint[0x1]) Jul 15 11:49:07.662835 kernel: ACPI: LAPIC_NMI (acpi_id[0x2f] high edge lint[0x1]) Jul 15 11:49:07.662840 kernel: ACPI: LAPIC_NMI (acpi_id[0x30] high edge lint[0x1]) Jul 15 11:49:07.662846 kernel: ACPI: LAPIC_NMI (acpi_id[0x31] high edge lint[0x1]) Jul 15 11:49:07.662851 kernel: ACPI: LAPIC_NMI (acpi_id[0x32] high edge lint[0x1]) Jul 15 11:49:07.662856 kernel: ACPI: LAPIC_NMI (acpi_id[0x33] high edge lint[0x1]) Jul 15 11:49:07.662861 kernel: ACPI: LAPIC_NMI (acpi_id[0x34] high edge lint[0x1]) Jul 15 11:49:07.662867 kernel: ACPI: LAPIC_NMI (acpi_id[0x35] high edge lint[0x1]) Jul 15 11:49:07.662872 kernel: ACPI: LAPIC_NMI (acpi_id[0x36] high edge lint[0x1]) Jul 15 11:49:07.662877 kernel: ACPI: LAPIC_NMI (acpi_id[0x37] high edge lint[0x1]) Jul 15 11:49:07.662882 kernel: ACPI: LAPIC_NMI (acpi_id[0x38] high edge lint[0x1]) Jul 15 11:49:07.662887 kernel: ACPI: LAPIC_NMI (acpi_id[0x39] high edge lint[0x1]) Jul 15 11:49:07.662892 kernel: ACPI: LAPIC_NMI (acpi_id[0x3a] high edge lint[0x1]) Jul 15 11:49:07.662898 kernel: ACPI: LAPIC_NMI (acpi_id[0x3b] high edge lint[0x1]) Jul 15 11:49:07.662904 kernel: ACPI: LAPIC_NMI (acpi_id[0x3c] high edge lint[0x1]) Jul 15 11:49:07.662909 kernel: ACPI: LAPIC_NMI (acpi_id[0x3d] high edge lint[0x1]) Jul 15 11:49:07.662914 kernel: ACPI: LAPIC_NMI (acpi_id[0x3e] high edge lint[0x1]) Jul 15 11:49:07.662919 kernel: ACPI: LAPIC_NMI (acpi_id[0x3f] high edge lint[0x1]) Jul 15 11:49:07.662924 kernel: ACPI: LAPIC_NMI (acpi_id[0x40] high edge lint[0x1]) Jul 15 11:49:07.662929 kernel: ACPI: LAPIC_NMI (acpi_id[0x41] high edge lint[0x1]) Jul 15 11:49:07.662934 kernel: ACPI: LAPIC_NMI (acpi_id[0x42] high edge lint[0x1]) Jul 15 11:49:07.662939 kernel: ACPI: LAPIC_NMI (acpi_id[0x43] high edge lint[0x1]) Jul 15 11:49:07.662946 kernel: ACPI: LAPIC_NMI (acpi_id[0x44] high edge lint[0x1]) Jul 15 11:49:07.662951 kernel: ACPI: LAPIC_NMI (acpi_id[0x45] high edge lint[0x1]) Jul 15 11:49:07.662956 kernel: ACPI: LAPIC_NMI (acpi_id[0x46] high edge lint[0x1]) Jul 15 11:49:07.662961 kernel: ACPI: LAPIC_NMI (acpi_id[0x47] high edge lint[0x1]) Jul 15 11:49:07.662966 kernel: ACPI: LAPIC_NMI (acpi_id[0x48] high edge lint[0x1]) Jul 15 11:49:07.662971 kernel: ACPI: LAPIC_NMI (acpi_id[0x49] high edge lint[0x1]) Jul 15 11:49:07.662976 kernel: ACPI: LAPIC_NMI (acpi_id[0x4a] high edge lint[0x1]) Jul 15 11:49:07.662981 kernel: ACPI: LAPIC_NMI (acpi_id[0x4b] high edge lint[0x1]) Jul 15 11:49:07.662987 kernel: ACPI: LAPIC_NMI (acpi_id[0x4c] high edge lint[0x1]) Jul 15 11:49:07.662992 kernel: ACPI: LAPIC_NMI (acpi_id[0x4d] high edge lint[0x1]) Jul 15 11:49:07.662998 kernel: ACPI: LAPIC_NMI (acpi_id[0x4e] high edge lint[0x1]) Jul 15 11:49:07.663003 kernel: ACPI: LAPIC_NMI (acpi_id[0x4f] high edge lint[0x1]) Jul 15 11:49:07.663008 kernel: ACPI: LAPIC_NMI (acpi_id[0x50] high edge lint[0x1]) Jul 15 11:49:07.663013 kernel: ACPI: LAPIC_NMI (acpi_id[0x51] high edge lint[0x1]) Jul 15 11:49:07.663018 kernel: ACPI: LAPIC_NMI (acpi_id[0x52] high edge lint[0x1]) Jul 15 11:49:07.663023 kernel: ACPI: LAPIC_NMI (acpi_id[0x53] high edge lint[0x1]) Jul 15 11:49:07.663029 kernel: ACPI: LAPIC_NMI (acpi_id[0x54] high edge lint[0x1]) Jul 15 11:49:07.663034 kernel: ACPI: LAPIC_NMI (acpi_id[0x55] high edge lint[0x1]) Jul 15 11:49:07.663039 kernel: ACPI: LAPIC_NMI (acpi_id[0x56] high edge lint[0x1]) Jul 15 11:49:07.663045 kernel: ACPI: LAPIC_NMI (acpi_id[0x57] high edge lint[0x1]) Jul 15 11:49:07.663050 kernel: ACPI: LAPIC_NMI (acpi_id[0x58] high edge lint[0x1]) Jul 15 11:49:07.663055 kernel: ACPI: LAPIC_NMI (acpi_id[0x59] high edge lint[0x1]) Jul 15 11:49:07.663060 kernel: ACPI: LAPIC_NMI (acpi_id[0x5a] high edge lint[0x1]) Jul 15 11:49:07.663065 kernel: ACPI: LAPIC_NMI (acpi_id[0x5b] high edge lint[0x1]) Jul 15 11:49:07.663070 kernel: ACPI: LAPIC_NMI (acpi_id[0x5c] high edge lint[0x1]) Jul 15 11:49:07.663075 kernel: ACPI: LAPIC_NMI (acpi_id[0x5d] high edge lint[0x1]) Jul 15 11:49:07.663080 kernel: ACPI: LAPIC_NMI (acpi_id[0x5e] high edge lint[0x1]) Jul 15 11:49:07.663086 kernel: ACPI: LAPIC_NMI (acpi_id[0x5f] high edge lint[0x1]) Jul 15 11:49:07.663091 kernel: ACPI: LAPIC_NMI (acpi_id[0x60] high edge lint[0x1]) Jul 15 11:49:07.663097 kernel: ACPI: LAPIC_NMI (acpi_id[0x61] high edge lint[0x1]) Jul 15 11:49:07.663102 kernel: ACPI: LAPIC_NMI (acpi_id[0x62] high edge lint[0x1]) Jul 15 11:49:07.663107 kernel: ACPI: LAPIC_NMI (acpi_id[0x63] high edge lint[0x1]) Jul 15 11:49:07.663112 kernel: ACPI: LAPIC_NMI (acpi_id[0x64] high edge lint[0x1]) Jul 15 11:49:07.663118 kernel: ACPI: LAPIC_NMI (acpi_id[0x65] high edge lint[0x1]) Jul 15 11:49:07.663123 kernel: ACPI: LAPIC_NMI (acpi_id[0x66] high edge lint[0x1]) Jul 15 11:49:07.663128 kernel: ACPI: LAPIC_NMI (acpi_id[0x67] high edge lint[0x1]) Jul 15 11:49:07.663133 kernel: ACPI: LAPIC_NMI (acpi_id[0x68] high edge lint[0x1]) Jul 15 11:49:07.663138 kernel: ACPI: LAPIC_NMI (acpi_id[0x69] high edge lint[0x1]) Jul 15 11:49:07.663145 kernel: ACPI: LAPIC_NMI (acpi_id[0x6a] high edge lint[0x1]) Jul 15 11:49:07.663150 kernel: ACPI: LAPIC_NMI (acpi_id[0x6b] high edge lint[0x1]) Jul 15 11:49:07.663155 kernel: ACPI: LAPIC_NMI (acpi_id[0x6c] high edge lint[0x1]) Jul 15 11:49:07.663160 kernel: ACPI: LAPIC_NMI (acpi_id[0x6d] high edge lint[0x1]) Jul 15 11:49:07.663165 kernel: ACPI: LAPIC_NMI (acpi_id[0x6e] high edge lint[0x1]) Jul 15 11:49:07.663170 kernel: ACPI: LAPIC_NMI (acpi_id[0x6f] high edge lint[0x1]) Jul 15 11:49:07.663175 kernel: ACPI: LAPIC_NMI (acpi_id[0x70] high edge lint[0x1]) Jul 15 11:49:07.663180 kernel: ACPI: LAPIC_NMI (acpi_id[0x71] high edge lint[0x1]) Jul 15 11:49:07.663186 kernel: ACPI: LAPIC_NMI (acpi_id[0x72] high edge lint[0x1]) Jul 15 11:49:07.663191 kernel: ACPI: LAPIC_NMI (acpi_id[0x73] high edge lint[0x1]) Jul 15 11:49:07.663197 kernel: ACPI: LAPIC_NMI (acpi_id[0x74] high edge lint[0x1]) Jul 15 11:49:07.663202 kernel: ACPI: LAPIC_NMI (acpi_id[0x75] high edge lint[0x1]) Jul 15 11:49:07.663207 kernel: ACPI: LAPIC_NMI (acpi_id[0x76] high edge lint[0x1]) Jul 15 11:49:07.663212 kernel: ACPI: LAPIC_NMI (acpi_id[0x77] high edge lint[0x1]) Jul 15 11:49:07.663218 kernel: ACPI: LAPIC_NMI (acpi_id[0x78] high edge lint[0x1]) Jul 15 11:49:07.663223 kernel: ACPI: LAPIC_NMI (acpi_id[0x79] high edge lint[0x1]) Jul 15 11:49:07.663228 kernel: ACPI: LAPIC_NMI (acpi_id[0x7a] high edge lint[0x1]) Jul 15 11:49:07.663233 kernel: ACPI: LAPIC_NMI (acpi_id[0x7b] high edge lint[0x1]) Jul 15 11:49:07.663238 kernel: ACPI: LAPIC_NMI (acpi_id[0x7c] high edge lint[0x1]) Jul 15 11:49:07.663244 kernel: ACPI: LAPIC_NMI (acpi_id[0x7d] high edge lint[0x1]) Jul 15 11:49:07.663249 kernel: ACPI: LAPIC_NMI (acpi_id[0x7e] high edge lint[0x1]) Jul 15 11:49:07.663254 kernel: ACPI: LAPIC_NMI (acpi_id[0x7f] high edge lint[0x1]) Jul 15 11:49:07.663260 kernel: IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 Jul 15 11:49:07.663265 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 high edge) Jul 15 11:49:07.663270 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 15 11:49:07.663275 kernel: ACPI: HPET id: 0x8086af01 base: 0xfed00000 Jul 15 11:49:07.663280 kernel: TSC deadline timer available Jul 15 11:49:07.663286 kernel: smpboot: Allowing 128 CPUs, 126 hotplug CPUs Jul 15 11:49:07.663292 kernel: [mem 0x80000000-0xefffffff] available for PCI devices Jul 15 11:49:07.663297 kernel: Booting paravirtualized kernel on VMware hypervisor Jul 15 11:49:07.663302 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 15 11:49:07.663308 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:128 nr_node_ids:1 Jul 15 11:49:07.663313 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u262144 Jul 15 11:49:07.663318 kernel: pcpu-alloc: s188696 r8192 d32488 u262144 alloc=1*2097152 Jul 15 11:49:07.663323 kernel: pcpu-alloc: [0] 000 001 002 003 004 005 006 007 Jul 15 11:49:07.663329 kernel: pcpu-alloc: [0] 008 009 010 011 012 013 014 015 Jul 15 11:49:07.663334 kernel: pcpu-alloc: [0] 016 017 018 019 020 021 022 023 Jul 15 11:49:07.663340 kernel: pcpu-alloc: [0] 024 025 026 027 028 029 030 031 Jul 15 11:49:07.663345 kernel: pcpu-alloc: [0] 032 033 034 035 036 037 038 039 Jul 15 11:49:07.663350 kernel: pcpu-alloc: [0] 040 041 042 043 044 045 046 047 Jul 15 11:49:07.663355 kernel: pcpu-alloc: [0] 048 049 050 051 052 053 054 055 Jul 15 11:49:07.663367 kernel: pcpu-alloc: [0] 056 057 058 059 060 061 062 063 Jul 15 11:49:07.663374 kernel: pcpu-alloc: [0] 064 065 066 067 068 069 070 071 Jul 15 11:49:07.663383 kernel: pcpu-alloc: [0] 072 073 074 075 076 077 078 079 Jul 15 11:49:07.663388 kernel: pcpu-alloc: [0] 080 081 082 083 084 085 086 087 Jul 15 11:49:07.663394 kernel: pcpu-alloc: [0] 088 089 090 091 092 093 094 095 Jul 15 11:49:07.663400 kernel: pcpu-alloc: [0] 096 097 098 099 100 101 102 103 Jul 15 11:49:07.663406 kernel: pcpu-alloc: [0] 104 105 106 107 108 109 110 111 Jul 15 11:49:07.663411 kernel: pcpu-alloc: [0] 112 113 114 115 116 117 118 119 Jul 15 11:49:07.663417 kernel: pcpu-alloc: [0] 120 121 122 123 124 125 126 127 Jul 15 11:49:07.663423 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515808 Jul 15 11:49:07.663428 kernel: Policy zone: DMA32 Jul 15 11:49:07.663435 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:49:07.663441 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 15 11:49:07.663447 kernel: printk: log_buf_len individual max cpu contribution: 4096 bytes Jul 15 11:49:07.663453 kernel: printk: log_buf_len total cpu_extra contributions: 520192 bytes Jul 15 11:49:07.663458 kernel: printk: log_buf_len min size: 262144 bytes Jul 15 11:49:07.663464 kernel: printk: log_buf_len: 1048576 bytes Jul 15 11:49:07.663470 kernel: printk: early log buf free: 239728(91%) Jul 15 11:49:07.663475 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 15 11:49:07.663481 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 15 11:49:07.663486 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 15 11:49:07.663492 kernel: Memory: 1940392K/2096628K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 155976K reserved, 0K cma-reserved) Jul 15 11:49:07.663499 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=128, Nodes=1 Jul 15 11:49:07.663512 kernel: ftrace: allocating 34607 entries in 136 pages Jul 15 11:49:07.663519 kernel: ftrace: allocated 136 pages with 2 groups Jul 15 11:49:07.663526 kernel: rcu: Hierarchical RCU implementation. Jul 15 11:49:07.663532 kernel: rcu: RCU event tracing is enabled. Jul 15 11:49:07.663538 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=128. Jul 15 11:49:07.663552 kernel: Rude variant of Tasks RCU enabled. Jul 15 11:49:07.663559 kernel: Tracing variant of Tasks RCU enabled. Jul 15 11:49:07.663565 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 15 11:49:07.663570 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=128 Jul 15 11:49:07.663576 kernel: NR_IRQS: 33024, nr_irqs: 1448, preallocated irqs: 16 Jul 15 11:49:07.663581 kernel: random: crng init done Jul 15 11:49:07.663587 kernel: Console: colour VGA+ 80x25 Jul 15 11:49:07.663592 kernel: printk: console [tty0] enabled Jul 15 11:49:07.663598 kernel: printk: console [ttyS0] enabled Jul 15 11:49:07.663605 kernel: ACPI: Core revision 20210730 Jul 15 11:49:07.663611 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns Jul 15 11:49:07.663616 kernel: APIC: Switch to symmetric I/O mode setup Jul 15 11:49:07.663622 kernel: x2apic enabled Jul 15 11:49:07.663627 kernel: Switched APIC routing to physical x2apic. Jul 15 11:49:07.663633 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 15 11:49:07.663639 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 15 11:49:07.663644 kernel: Calibrating delay loop (skipped) preset value.. 6816.00 BogoMIPS (lpj=3408000) Jul 15 11:49:07.663656 kernel: Disabled fast string operations Jul 15 11:49:07.663665 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Jul 15 11:49:07.663671 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Jul 15 11:49:07.663677 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 15 11:49:07.663683 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Jul 15 11:49:07.663689 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit Jul 15 11:49:07.663694 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall Jul 15 11:49:07.663700 kernel: Spectre V2 : Mitigation: Enhanced / Automatic IBRS Jul 15 11:49:07.663712 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Jul 15 11:49:07.663718 kernel: RETBleed: Mitigation: Enhanced IBRS Jul 15 11:49:07.663726 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 15 11:49:07.663732 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 15 11:49:07.663738 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Jul 15 11:49:07.663743 kernel: SRBDS: Unknown: Dependent on hypervisor status Jul 15 11:49:07.663754 kernel: GDS: Unknown: Dependent on hypervisor status Jul 15 11:49:07.663760 kernel: ITS: Mitigation: Aligned branch/return thunks Jul 15 11:49:07.663765 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 15 11:49:07.663771 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 15 11:49:07.663778 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 15 11:49:07.663784 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 15 11:49:07.663796 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'compacted' format. Jul 15 11:49:07.663803 kernel: Freeing SMP alternatives memory: 32K Jul 15 11:49:07.663809 kernel: pid_max: default: 131072 minimum: 1024 Jul 15 11:49:07.663814 kernel: LSM: Security Framework initializing Jul 15 11:49:07.663820 kernel: SELinux: Initializing. Jul 15 11:49:07.663826 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 15 11:49:07.663836 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 15 11:49:07.663844 kernel: smpboot: CPU0: Intel(R) Xeon(R) E-2278G CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0xd) Jul 15 11:49:07.663850 kernel: Performance Events: Skylake events, core PMU driver. Jul 15 11:49:07.663855 kernel: core: CPUID marked event: 'cpu cycles' unavailable Jul 15 11:49:07.663862 kernel: core: CPUID marked event: 'instructions' unavailable Jul 15 11:49:07.663874 kernel: core: CPUID marked event: 'bus cycles' unavailable Jul 15 11:49:07.663880 kernel: core: CPUID marked event: 'cache references' unavailable Jul 15 11:49:07.663886 kernel: core: CPUID marked event: 'cache misses' unavailable Jul 15 11:49:07.663891 kernel: core: CPUID marked event: 'branch instructions' unavailable Jul 15 11:49:07.663897 kernel: core: CPUID marked event: 'branch misses' unavailable Jul 15 11:49:07.663904 kernel: ... version: 1 Jul 15 11:49:07.663916 kernel: ... bit width: 48 Jul 15 11:49:07.663923 kernel: ... generic registers: 4 Jul 15 11:49:07.663928 kernel: ... value mask: 0000ffffffffffff Jul 15 11:49:07.663934 kernel: ... max period: 000000007fffffff Jul 15 11:49:07.663939 kernel: ... fixed-purpose events: 0 Jul 15 11:49:07.663945 kernel: ... event mask: 000000000000000f Jul 15 11:49:07.663951 kernel: signal: max sigframe size: 1776 Jul 15 11:49:07.663956 kernel: rcu: Hierarchical SRCU implementation. Jul 15 11:49:07.663964 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Jul 15 11:49:07.663969 kernel: smp: Bringing up secondary CPUs ... Jul 15 11:49:07.663975 kernel: x86: Booting SMP configuration: Jul 15 11:49:07.663981 kernel: .... node #0, CPUs: #1 Jul 15 11:49:07.663986 kernel: Disabled fast string operations Jul 15 11:49:07.663995 kernel: smpboot: CPU 1 Converting physical 2 to logical package 1 Jul 15 11:49:07.664003 kernel: smpboot: CPU 1 Converting physical 0 to logical die 1 Jul 15 11:49:07.664008 kernel: smp: Brought up 1 node, 2 CPUs Jul 15 11:49:07.664014 kernel: smpboot: Max logical packages: 128 Jul 15 11:49:07.664019 kernel: smpboot: Total of 2 processors activated (13632.00 BogoMIPS) Jul 15 11:49:07.664026 kernel: devtmpfs: initialized Jul 15 11:49:07.664032 kernel: x86/mm: Memory block size: 128MB Jul 15 11:49:07.664037 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7feff000-0x7fefffff] (4096 bytes) Jul 15 11:49:07.664043 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 15 11:49:07.664049 kernel: futex hash table entries: 32768 (order: 9, 2097152 bytes, linear) Jul 15 11:49:07.664054 kernel: pinctrl core: initialized pinctrl subsystem Jul 15 11:49:07.664060 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 15 11:49:07.664066 kernel: audit: initializing netlink subsys (disabled) Jul 15 11:49:07.664080 kernel: audit: type=2000 audit(1752580146.084:1): state=initialized audit_enabled=0 res=1 Jul 15 11:49:07.664088 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 15 11:49:07.664094 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 15 11:49:07.664100 kernel: cpuidle: using governor menu Jul 15 11:49:07.664105 kernel: Simple Boot Flag at 0x36 set to 0x80 Jul 15 11:49:07.664111 kernel: ACPI: bus type PCI registered Jul 15 11:49:07.664117 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 15 11:49:07.664122 kernel: dca service started, version 1.12.1 Jul 15 11:49:07.664128 kernel: PCI: MMCONFIG for domain 0000 [bus 00-7f] at [mem 0xf0000000-0xf7ffffff] (base 0xf0000000) Jul 15 11:49:07.664134 kernel: PCI: MMCONFIG at [mem 0xf0000000-0xf7ffffff] reserved in E820 Jul 15 11:49:07.664141 kernel: PCI: Using configuration type 1 for base access Jul 15 11:49:07.664152 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 15 11:49:07.664158 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 15 11:49:07.664164 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 15 11:49:07.664169 kernel: ACPI: Added _OSI(Module Device) Jul 15 11:49:07.664175 kernel: ACPI: Added _OSI(Processor Device) Jul 15 11:49:07.664180 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 15 11:49:07.664186 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 15 11:49:07.664192 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 15 11:49:07.664198 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 15 11:49:07.664204 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 15 11:49:07.664210 kernel: ACPI: [Firmware Bug]: BIOS _OSI(Linux) query ignored Jul 15 11:49:07.664215 kernel: ACPI: Interpreter enabled Jul 15 11:49:07.664223 kernel: ACPI: PM: (supports S0 S1 S5) Jul 15 11:49:07.664234 kernel: ACPI: Using IOAPIC for interrupt routing Jul 15 11:49:07.664240 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 15 11:49:07.664247 kernel: ACPI: Enabled 4 GPEs in block 00 to 0F Jul 15 11:49:07.664252 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-7f]) Jul 15 11:49:07.664340 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 15 11:49:07.664413 kernel: acpi PNP0A03:00: _OSC: platform does not support [AER LTR] Jul 15 11:49:07.664480 kernel: acpi PNP0A03:00: _OSC: OS now controls [PCIeHotplug PME PCIeCapability] Jul 15 11:49:07.664490 kernel: PCI host bridge to bus 0000:00 Jul 15 11:49:07.664572 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 15 11:49:07.664640 kernel: pci_bus 0000:00: root bus resource [mem 0x000cc000-0x000dbfff window] Jul 15 11:49:07.664699 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 15 11:49:07.664757 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 15 11:49:07.664817 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xfeff window] Jul 15 11:49:07.664868 kernel: pci_bus 0000:00: root bus resource [bus 00-7f] Jul 15 11:49:07.664950 kernel: pci 0000:00:00.0: [8086:7190] type 00 class 0x060000 Jul 15 11:49:07.665023 kernel: pci 0000:00:01.0: [8086:7191] type 01 class 0x060400 Jul 15 11:49:07.665079 kernel: pci 0000:00:07.0: [8086:7110] type 00 class 0x060100 Jul 15 11:49:07.665136 kernel: pci 0000:00:07.1: [8086:7111] type 00 class 0x01018a Jul 15 11:49:07.665186 kernel: pci 0000:00:07.1: reg 0x20: [io 0x1060-0x106f] Jul 15 11:49:07.665235 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Jul 15 11:49:07.665284 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Jul 15 11:49:07.665333 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Jul 15 11:49:07.665386 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Jul 15 11:49:07.665442 kernel: pci 0000:00:07.3: [8086:7113] type 00 class 0x068000 Jul 15 11:49:07.665491 kernel: pci 0000:00:07.3: quirk: [io 0x1000-0x103f] claimed by PIIX4 ACPI Jul 15 11:49:07.674526 kernel: pci 0000:00:07.3: quirk: [io 0x1040-0x104f] claimed by PIIX4 SMB Jul 15 11:49:07.674602 kernel: pci 0000:00:07.7: [15ad:0740] type 00 class 0x088000 Jul 15 11:49:07.674655 kernel: pci 0000:00:07.7: reg 0x10: [io 0x1080-0x10bf] Jul 15 11:49:07.674706 kernel: pci 0000:00:07.7: reg 0x14: [mem 0xfebfe000-0xfebfffff 64bit] Jul 15 11:49:07.674766 kernel: pci 0000:00:0f.0: [15ad:0405] type 00 class 0x030000 Jul 15 11:49:07.674816 kernel: pci 0000:00:0f.0: reg 0x10: [io 0x1070-0x107f] Jul 15 11:49:07.674865 kernel: pci 0000:00:0f.0: reg 0x14: [mem 0xe8000000-0xefffffff pref] Jul 15 11:49:07.674913 kernel: pci 0000:00:0f.0: reg 0x18: [mem 0xfe000000-0xfe7fffff] Jul 15 11:49:07.674962 kernel: pci 0000:00:0f.0: reg 0x30: [mem 0x00000000-0x00007fff pref] Jul 15 11:49:07.675011 kernel: pci 0000:00:0f.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 15 11:49:07.675089 kernel: pci 0000:00:11.0: [15ad:0790] type 01 class 0x060401 Jul 15 11:49:07.675147 kernel: pci 0000:00:15.0: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.675197 kernel: pci 0000:00:15.0: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.675251 kernel: pci 0000:00:15.1: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.675304 kernel: pci 0000:00:15.1: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.675358 kernel: pci 0000:00:15.2: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.675408 kernel: pci 0000:00:15.2: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.675461 kernel: pci 0000:00:15.3: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.678690 kernel: pci 0000:00:15.3: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.679562 kernel: pci 0000:00:15.4: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.679625 kernel: pci 0000:00:15.4: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.679688 kernel: pci 0000:00:15.5: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.679743 kernel: pci 0000:00:15.5: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.679800 kernel: pci 0000:00:15.6: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.679858 kernel: pci 0000:00:15.6: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.679916 kernel: pci 0000:00:15.7: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.679969 kernel: pci 0000:00:15.7: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.680025 kernel: pci 0000:00:16.0: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.680078 kernel: pci 0000:00:16.0: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.680138 kernel: pci 0000:00:16.1: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.680192 kernel: pci 0000:00:16.1: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.680248 kernel: pci 0000:00:16.2: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.680301 kernel: pci 0000:00:16.2: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.680358 kernel: pci 0000:00:16.3: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.680411 kernel: pci 0000:00:16.3: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.680470 kernel: pci 0000:00:16.4: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.680532 kernel: pci 0000:00:16.4: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.680593 kernel: pci 0000:00:16.5: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.680647 kernel: pci 0000:00:16.5: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.680704 kernel: pci 0000:00:16.6: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.680757 kernel: pci 0000:00:16.6: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.680813 kernel: pci 0000:00:16.7: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.680870 kernel: pci 0000:00:16.7: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.680926 kernel: pci 0000:00:17.0: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.680980 kernel: pci 0000:00:17.0: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.681037 kernel: pci 0000:00:17.1: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.681091 kernel: pci 0000:00:17.1: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.681147 kernel: pci 0000:00:17.2: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.681203 kernel: pci 0000:00:17.2: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.681260 kernel: pci 0000:00:17.3: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.681312 kernel: pci 0000:00:17.3: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.681368 kernel: pci 0000:00:17.4: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.681421 kernel: pci 0000:00:17.4: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.681478 kernel: pci 0000:00:17.5: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.681547 kernel: pci 0000:00:17.5: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.681608 kernel: pci 0000:00:17.6: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.681662 kernel: pci 0000:00:17.6: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.681719 kernel: pci 0000:00:17.7: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.681772 kernel: pci 0000:00:17.7: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.681828 kernel: pci 0000:00:18.0: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.681886 kernel: pci 0000:00:18.0: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.681944 kernel: pci 0000:00:18.1: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.681998 kernel: pci 0000:00:18.1: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.682055 kernel: pci 0000:00:18.2: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.682109 kernel: pci 0000:00:18.2: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.682166 kernel: pci 0000:00:18.3: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.682223 kernel: pci 0000:00:18.3: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.682279 kernel: pci 0000:00:18.4: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.682334 kernel: pci 0000:00:18.4: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.682395 kernel: pci 0000:00:18.5: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.682450 kernel: pci 0000:00:18.5: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.682599 kernel: pci 0000:00:18.6: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.682675 kernel: pci 0000:00:18.6: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.682738 kernel: pci 0000:00:18.7: [15ad:07a0] type 01 class 0x060400 Jul 15 11:49:07.682792 kernel: pci 0000:00:18.7: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.682851 kernel: pci_bus 0000:01: extended config space not accessible Jul 15 11:49:07.682907 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 15 11:49:07.682964 kernel: pci_bus 0000:02: extended config space not accessible Jul 15 11:49:07.682973 kernel: acpiphp: Slot [32] registered Jul 15 11:49:07.682981 kernel: acpiphp: Slot [33] registered Jul 15 11:49:07.682987 kernel: acpiphp: Slot [34] registered Jul 15 11:49:07.682992 kernel: acpiphp: Slot [35] registered Jul 15 11:49:07.682998 kernel: acpiphp: Slot [36] registered Jul 15 11:49:07.683004 kernel: acpiphp: Slot [37] registered Jul 15 11:49:07.683009 kernel: acpiphp: Slot [38] registered Jul 15 11:49:07.683015 kernel: acpiphp: Slot [39] registered Jul 15 11:49:07.683020 kernel: acpiphp: Slot [40] registered Jul 15 11:49:07.683026 kernel: acpiphp: Slot [41] registered Jul 15 11:49:07.683031 kernel: acpiphp: Slot [42] registered Jul 15 11:49:07.683039 kernel: acpiphp: Slot [43] registered Jul 15 11:49:07.683044 kernel: acpiphp: Slot [44] registered Jul 15 11:49:07.683050 kernel: acpiphp: Slot [45] registered Jul 15 11:49:07.683055 kernel: acpiphp: Slot [46] registered Jul 15 11:49:07.683061 kernel: acpiphp: Slot [47] registered Jul 15 11:49:07.683067 kernel: acpiphp: Slot [48] registered Jul 15 11:49:07.683072 kernel: acpiphp: Slot [49] registered Jul 15 11:49:07.683078 kernel: acpiphp: Slot [50] registered Jul 15 11:49:07.683083 kernel: acpiphp: Slot [51] registered Jul 15 11:49:07.683090 kernel: acpiphp: Slot [52] registered Jul 15 11:49:07.683095 kernel: acpiphp: Slot [53] registered Jul 15 11:49:07.683101 kernel: acpiphp: Slot [54] registered Jul 15 11:49:07.683107 kernel: acpiphp: Slot [55] registered Jul 15 11:49:07.683113 kernel: acpiphp: Slot [56] registered Jul 15 11:49:07.683119 kernel: acpiphp: Slot [57] registered Jul 15 11:49:07.683124 kernel: acpiphp: Slot [58] registered Jul 15 11:49:07.683130 kernel: acpiphp: Slot [59] registered Jul 15 11:49:07.683135 kernel: acpiphp: Slot [60] registered Jul 15 11:49:07.683141 kernel: acpiphp: Slot [61] registered Jul 15 11:49:07.683147 kernel: acpiphp: Slot [62] registered Jul 15 11:49:07.683153 kernel: acpiphp: Slot [63] registered Jul 15 11:49:07.683207 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] (subtractive decode) Jul 15 11:49:07.683261 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 15 11:49:07.683314 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 15 11:49:07.683366 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 15 11:49:07.683418 kernel: pci 0000:00:11.0: bridge window [mem 0x000a0000-0x000bffff window] (subtractive decode) Jul 15 11:49:07.683471 kernel: pci 0000:00:11.0: bridge window [mem 0x000cc000-0x000dbfff window] (subtractive decode) Jul 15 11:49:07.683557 kernel: pci 0000:00:11.0: bridge window [mem 0xc0000000-0xfebfffff window] (subtractive decode) Jul 15 11:49:07.683611 kernel: pci 0000:00:11.0: bridge window [io 0x0000-0x0cf7 window] (subtractive decode) Jul 15 11:49:07.683664 kernel: pci 0000:00:11.0: bridge window [io 0x0d00-0xfeff window] (subtractive decode) Jul 15 11:49:07.683739 kernel: pci 0000:03:00.0: [15ad:07c0] type 00 class 0x010700 Jul 15 11:49:07.683990 kernel: pci 0000:03:00.0: reg 0x10: [io 0x4000-0x4007] Jul 15 11:49:07.684045 kernel: pci 0000:03:00.0: reg 0x14: [mem 0xfd5f8000-0xfd5fffff 64bit] Jul 15 11:49:07.684097 kernel: pci 0000:03:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 15 11:49:07.684151 kernel: pci 0000:03:00.0: PME# supported from D0 D3hot D3cold Jul 15 11:49:07.684201 kernel: pci 0000:03:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 15 11:49:07.684252 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 15 11:49:07.684303 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 15 11:49:07.684353 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 15 11:49:07.684430 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 15 11:49:07.684493 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 15 11:49:07.684566 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 15 11:49:07.684628 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 15 11:49:07.684691 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 15 11:49:07.685054 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 15 11:49:07.685113 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 15 11:49:07.685166 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 15 11:49:07.685219 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 15 11:49:07.685269 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 15 11:49:07.685322 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 15 11:49:07.685372 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 15 11:49:07.685422 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 15 11:49:07.685471 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 15 11:49:07.685630 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 15 11:49:07.685681 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 15 11:49:07.685730 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 15 11:49:07.685955 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 15 11:49:07.686008 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 15 11:49:07.686058 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 15 11:49:07.686109 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 15 11:49:07.686157 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 15 11:49:07.686209 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 15 11:49:07.686268 kernel: pci 0000:0b:00.0: [15ad:07b0] type 00 class 0x020000 Jul 15 11:49:07.686319 kernel: pci 0000:0b:00.0: reg 0x10: [mem 0xfd4fc000-0xfd4fcfff] Jul 15 11:49:07.686370 kernel: pci 0000:0b:00.0: reg 0x14: [mem 0xfd4fd000-0xfd4fdfff] Jul 15 11:49:07.686419 kernel: pci 0000:0b:00.0: reg 0x18: [mem 0xfd4fe000-0xfd4fffff] Jul 15 11:49:07.686469 kernel: pci 0000:0b:00.0: reg 0x1c: [io 0x5000-0x500f] Jul 15 11:49:07.686534 kernel: pci 0000:0b:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 15 11:49:07.686602 kernel: pci 0000:0b:00.0: supports D1 D2 Jul 15 11:49:07.686666 kernel: pci 0000:0b:00.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 15 11:49:07.686718 kernel: pci 0000:0b:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 15 11:49:07.686769 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 15 11:49:07.687134 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 15 11:49:07.687193 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 15 11:49:07.687261 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 15 11:49:07.687313 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 15 11:49:07.687367 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 15 11:49:07.687423 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 15 11:49:07.687475 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 15 11:49:07.687576 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 15 11:49:07.687626 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 15 11:49:07.687678 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 15 11:49:07.687750 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 15 11:49:07.692482 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 15 11:49:07.692560 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 15 11:49:07.692614 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 15 11:49:07.692666 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 15 11:49:07.692716 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 15 11:49:07.692768 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 15 11:49:07.692817 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 15 11:49:07.692866 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 15 11:49:07.692917 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 15 11:49:07.692968 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 15 11:49:07.693017 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 15 11:49:07.693069 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 15 11:49:07.693118 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 15 11:49:07.693167 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 15 11:49:07.693217 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 15 11:49:07.693266 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 15 11:49:07.693314 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 15 11:49:07.693366 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 15 11:49:07.693417 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 15 11:49:07.693467 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 15 11:49:07.693528 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 15 11:49:07.693768 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 15 11:49:07.693824 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 15 11:49:07.693875 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 15 11:49:07.693928 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 15 11:49:07.693977 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 15 11:49:07.694028 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 15 11:49:07.694078 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 15 11:49:07.694126 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 15 11:49:07.694176 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 15 11:49:07.694225 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 15 11:49:07.694273 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 15 11:49:07.694325 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 15 11:49:07.694373 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 15 11:49:07.694438 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 15 11:49:07.694489 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 15 11:49:07.694552 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 15 11:49:07.694602 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 15 11:49:07.694654 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 15 11:49:07.694994 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 15 11:49:07.695059 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 15 11:49:07.695115 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 15 11:49:07.695166 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 15 11:49:07.695216 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 15 11:49:07.695266 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 15 11:49:07.695318 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 15 11:49:07.695367 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 15 11:49:07.695415 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 15 11:49:07.695465 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 15 11:49:07.695563 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 15 11:49:07.695614 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 15 11:49:07.695662 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 15 11:49:07.695712 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 15 11:49:07.695761 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 15 11:49:07.695809 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 15 11:49:07.695859 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 15 11:49:07.695911 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 15 11:49:07.695959 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 15 11:49:07.696010 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 15 11:49:07.696060 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 15 11:49:07.696109 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 15 11:49:07.696159 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 15 11:49:07.696209 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 15 11:49:07.696257 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 15 11:49:07.696309 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 15 11:49:07.696359 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 15 11:49:07.696408 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 15 11:49:07.696416 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 9 Jul 15 11:49:07.696422 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 0 Jul 15 11:49:07.696428 kernel: ACPI: PCI: Interrupt link LNKB disabled Jul 15 11:49:07.696434 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 15 11:49:07.696440 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 10 Jul 15 11:49:07.696447 kernel: iommu: Default domain type: Translated Jul 15 11:49:07.696453 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 15 11:49:07.696510 kernel: pci 0000:00:0f.0: vgaarb: setting as boot VGA device Jul 15 11:49:07.696561 kernel: pci 0000:00:0f.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 15 11:49:07.696609 kernel: pci 0000:00:0f.0: vgaarb: bridge control possible Jul 15 11:49:07.696617 kernel: vgaarb: loaded Jul 15 11:49:07.696623 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 15 11:49:07.696630 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 15 11:49:07.696635 kernel: PTP clock support registered Jul 15 11:49:07.696643 kernel: PCI: Using ACPI for IRQ routing Jul 15 11:49:07.696649 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 15 11:49:07.696655 kernel: e820: reserve RAM buffer [mem 0x0009ec00-0x0009ffff] Jul 15 11:49:07.696661 kernel: e820: reserve RAM buffer [mem 0x7fee0000-0x7fffffff] Jul 15 11:49:07.696666 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 Jul 15 11:49:07.696672 kernel: hpet0: 16 comparators, 64-bit 14.318180 MHz counter Jul 15 11:49:07.696678 kernel: clocksource: Switched to clocksource tsc-early Jul 15 11:49:07.696684 kernel: VFS: Disk quotas dquot_6.6.0 Jul 15 11:49:07.696690 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 15 11:49:07.696697 kernel: pnp: PnP ACPI init Jul 15 11:49:07.696750 kernel: system 00:00: [io 0x1000-0x103f] has been reserved Jul 15 11:49:07.696797 kernel: system 00:00: [io 0x1040-0x104f] has been reserved Jul 15 11:49:07.696841 kernel: system 00:00: [io 0x0cf0-0x0cf1] has been reserved Jul 15 11:49:07.696891 kernel: system 00:04: [mem 0xfed00000-0xfed003ff] has been reserved Jul 15 11:49:07.696940 kernel: pnp 00:06: [dma 2] Jul 15 11:49:07.696988 kernel: system 00:07: [io 0xfce0-0xfcff] has been reserved Jul 15 11:49:07.697036 kernel: system 00:07: [mem 0xf0000000-0xf7ffffff] has been reserved Jul 15 11:49:07.697081 kernel: system 00:07: [mem 0xfe800000-0xfe9fffff] has been reserved Jul 15 11:49:07.697089 kernel: pnp: PnP ACPI: found 8 devices Jul 15 11:49:07.697095 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 15 11:49:07.697101 kernel: NET: Registered PF_INET protocol family Jul 15 11:49:07.697107 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 15 11:49:07.697113 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 15 11:49:07.697118 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 15 11:49:07.697126 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 15 11:49:07.697132 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 15 11:49:07.697138 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 15 11:49:07.697144 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 15 11:49:07.697149 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 15 11:49:07.697155 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 15 11:49:07.697161 kernel: NET: Registered PF_XDP protocol family Jul 15 11:49:07.697212 kernel: pci 0000:00:15.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 03] add_size 200000 add_align 100000 Jul 15 11:49:07.697268 kernel: pci 0000:00:15.3: bridge window [io 0x1000-0x0fff] to [bus 06] add_size 1000 Jul 15 11:49:07.697340 kernel: pci 0000:00:15.4: bridge window [io 0x1000-0x0fff] to [bus 07] add_size 1000 Jul 15 11:49:07.697397 kernel: pci 0000:00:15.5: bridge window [io 0x1000-0x0fff] to [bus 08] add_size 1000 Jul 15 11:49:07.697450 kernel: pci 0000:00:15.6: bridge window [io 0x1000-0x0fff] to [bus 09] add_size 1000 Jul 15 11:49:07.697507 kernel: pci 0000:00:15.7: bridge window [io 0x1000-0x0fff] to [bus 0a] add_size 1000 Jul 15 11:49:07.697560 kernel: pci 0000:00:16.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0b] add_size 200000 add_align 100000 Jul 15 11:49:07.697614 kernel: pci 0000:00:16.3: bridge window [io 0x1000-0x0fff] to [bus 0e] add_size 1000 Jul 15 11:49:07.697664 kernel: pci 0000:00:16.4: bridge window [io 0x1000-0x0fff] to [bus 0f] add_size 1000 Jul 15 11:49:07.697876 kernel: pci 0000:00:16.5: bridge window [io 0x1000-0x0fff] to [bus 10] add_size 1000 Jul 15 11:49:07.697938 kernel: pci 0000:00:16.6: bridge window [io 0x1000-0x0fff] to [bus 11] add_size 1000 Jul 15 11:49:07.697991 kernel: pci 0000:00:16.7: bridge window [io 0x1000-0x0fff] to [bus 12] add_size 1000 Jul 15 11:49:07.698042 kernel: pci 0000:00:17.3: bridge window [io 0x1000-0x0fff] to [bus 16] add_size 1000 Jul 15 11:49:07.698094 kernel: pci 0000:00:17.4: bridge window [io 0x1000-0x0fff] to [bus 17] add_size 1000 Jul 15 11:49:07.698366 kernel: pci 0000:00:17.5: bridge window [io 0x1000-0x0fff] to [bus 18] add_size 1000 Jul 15 11:49:07.698422 kernel: pci 0000:00:17.6: bridge window [io 0x1000-0x0fff] to [bus 19] add_size 1000 Jul 15 11:49:07.698475 kernel: pci 0000:00:17.7: bridge window [io 0x1000-0x0fff] to [bus 1a] add_size 1000 Jul 15 11:49:07.698849 kernel: pci 0000:00:18.2: bridge window [io 0x1000-0x0fff] to [bus 1d] add_size 1000 Jul 15 11:49:07.699205 kernel: pci 0000:00:18.3: bridge window [io 0x1000-0x0fff] to [bus 1e] add_size 1000 Jul 15 11:49:07.699270 kernel: pci 0000:00:18.4: bridge window [io 0x1000-0x0fff] to [bus 1f] add_size 1000 Jul 15 11:49:07.699587 kernel: pci 0000:00:18.5: bridge window [io 0x1000-0x0fff] to [bus 20] add_size 1000 Jul 15 11:49:07.699646 kernel: pci 0000:00:18.6: bridge window [io 0x1000-0x0fff] to [bus 21] add_size 1000 Jul 15 11:49:07.699699 kernel: pci 0000:00:18.7: bridge window [io 0x1000-0x0fff] to [bus 22] add_size 1000 Jul 15 11:49:07.699762 kernel: pci 0000:00:15.0: BAR 15: assigned [mem 0xc0000000-0xc01fffff 64bit pref] Jul 15 11:49:07.699814 kernel: pci 0000:00:16.0: BAR 15: assigned [mem 0xc0200000-0xc03fffff 64bit pref] Jul 15 11:49:07.699869 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.699918 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.699967 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.700016 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.700066 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.700115 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.700165 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.700214 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.700266 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.700315 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.700365 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.700420 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.700469 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.700527 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.700577 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.700626 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.700678 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.700726 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.700775 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.700823 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.700873 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.700922 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.700972 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.701020 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.701072 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.701120 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.701170 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.701219 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.701269 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.701318 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.701367 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.701417 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.701469 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.702246 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.702305 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.702356 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.702414 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.702464 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.702521 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.702571 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.702622 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.702670 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.702718 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.702766 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.702814 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.702862 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.702910 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.702957 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.703005 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.703056 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.703104 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.703151 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.703198 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.703247 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.703294 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.703343 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.703401 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.703453 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.703508 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.703562 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.703612 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.703660 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.703710 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.703758 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.703808 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.703856 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.703905 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.703954 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.704006 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.704054 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.704102 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.704151 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.704199 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.704248 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.704297 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.704345 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.704408 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.704458 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.704517 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.704566 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.704616 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.704663 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.704713 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 15 11:49:07.704761 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:49:07.704813 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 15 11:49:07.704862 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] Jul 15 11:49:07.704911 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 15 11:49:07.704963 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 15 11:49:07.705032 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 15 11:49:07.705302 kernel: pci 0000:03:00.0: BAR 6: assigned [mem 0xfd500000-0xfd50ffff pref] Jul 15 11:49:07.705360 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 15 11:49:07.705412 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 15 11:49:07.705475 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 15 11:49:07.705776 kernel: pci 0000:00:15.0: bridge window [mem 0xc0000000-0xc01fffff 64bit pref] Jul 15 11:49:07.705833 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 15 11:49:07.706109 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 15 11:49:07.706172 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 15 11:49:07.706224 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 15 11:49:07.706276 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 15 11:49:07.706331 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 15 11:49:07.706391 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 15 11:49:07.706779 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 15 11:49:07.706843 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 15 11:49:07.706895 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 15 11:49:07.706948 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 15 11:49:07.706998 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 15 11:49:07.707047 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 15 11:49:07.707096 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 15 11:49:07.707147 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 15 11:49:07.707196 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 15 11:49:07.707248 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 15 11:49:07.707303 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 15 11:49:07.707351 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 15 11:49:07.707404 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 15 11:49:07.707452 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 15 11:49:07.707575 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 15 11:49:07.707633 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 15 11:49:07.707686 kernel: pci 0000:0b:00.0: BAR 6: assigned [mem 0xfd400000-0xfd40ffff pref] Jul 15 11:49:07.707737 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 15 11:49:07.707786 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 15 11:49:07.707837 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 15 11:49:07.707885 kernel: pci 0000:00:16.0: bridge window [mem 0xc0200000-0xc03fffff 64bit pref] Jul 15 11:49:07.707936 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 15 11:49:07.707986 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 15 11:49:07.708036 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 15 11:49:07.708084 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 15 11:49:07.708134 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 15 11:49:07.708183 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 15 11:49:07.708233 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 15 11:49:07.708283 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 15 11:49:07.708332 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 15 11:49:07.708381 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 15 11:49:07.708430 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 15 11:49:07.708478 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 15 11:49:07.708822 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 15 11:49:07.708877 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 15 11:49:07.708929 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 15 11:49:07.708978 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 15 11:49:07.709030 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 15 11:49:07.709080 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 15 11:49:07.709128 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 15 11:49:07.709177 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 15 11:49:07.709226 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 15 11:49:07.709274 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 15 11:49:07.709323 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 15 11:49:07.709373 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 15 11:49:07.709422 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 15 11:49:07.709470 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 15 11:49:07.709543 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 15 11:49:07.709593 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 15 11:49:07.709641 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 15 11:49:07.709689 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 15 11:49:07.709738 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 15 11:49:07.709787 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 15 11:49:07.709836 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 15 11:49:07.709883 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 15 11:49:07.709931 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 15 11:49:07.709983 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 15 11:49:07.710032 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 15 11:49:07.710079 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 15 11:49:07.710128 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 15 11:49:07.710176 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 15 11:49:07.710224 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 15 11:49:07.710274 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 15 11:49:07.710323 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 15 11:49:07.710372 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 15 11:49:07.710711 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 15 11:49:07.710779 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 15 11:49:07.710846 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 15 11:49:07.710926 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 15 11:49:07.711201 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 15 11:49:07.711255 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 15 11:49:07.711307 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 15 11:49:07.711608 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 15 11:49:07.711661 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 15 11:49:07.711711 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 15 11:49:07.711776 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 15 11:49:07.711835 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 15 11:49:07.711885 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 15 11:49:07.711954 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 15 11:49:07.712030 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 15 11:49:07.712108 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 15 11:49:07.712160 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 15 11:49:07.712230 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 15 11:49:07.712311 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 15 11:49:07.712366 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 15 11:49:07.712432 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 15 11:49:07.712482 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 15 11:49:07.712824 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 15 11:49:07.713117 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 15 11:49:07.713173 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 15 11:49:07.713224 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 15 11:49:07.713300 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 15 11:49:07.713625 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 15 11:49:07.713903 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 15 11:49:07.713965 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 15 11:49:07.714016 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 15 11:49:07.714070 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 15 11:49:07.714120 kernel: pci_bus 0000:00: resource 4 [mem 0x000a0000-0x000bffff window] Jul 15 11:49:07.714165 kernel: pci_bus 0000:00: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 15 11:49:07.714208 kernel: pci_bus 0000:00: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 15 11:49:07.714250 kernel: pci_bus 0000:00: resource 7 [io 0x0000-0x0cf7 window] Jul 15 11:49:07.714292 kernel: pci_bus 0000:00: resource 8 [io 0x0d00-0xfeff window] Jul 15 11:49:07.714340 kernel: pci_bus 0000:02: resource 0 [io 0x2000-0x3fff] Jul 15 11:49:07.714400 kernel: pci_bus 0000:02: resource 1 [mem 0xfd600000-0xfdffffff] Jul 15 11:49:07.714446 kernel: pci_bus 0000:02: resource 2 [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 15 11:49:07.714491 kernel: pci_bus 0000:02: resource 4 [mem 0x000a0000-0x000bffff window] Jul 15 11:49:07.714777 kernel: pci_bus 0000:02: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 15 11:49:07.714828 kernel: pci_bus 0000:02: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 15 11:49:07.715098 kernel: pci_bus 0000:02: resource 7 [io 0x0000-0x0cf7 window] Jul 15 11:49:07.715148 kernel: pci_bus 0000:02: resource 8 [io 0x0d00-0xfeff window] Jul 15 11:49:07.715203 kernel: pci_bus 0000:03: resource 0 [io 0x4000-0x4fff] Jul 15 11:49:07.715250 kernel: pci_bus 0000:03: resource 1 [mem 0xfd500000-0xfd5fffff] Jul 15 11:49:07.715301 kernel: pci_bus 0000:03: resource 2 [mem 0xc0000000-0xc01fffff 64bit pref] Jul 15 11:49:07.715351 kernel: pci_bus 0000:04: resource 0 [io 0x8000-0x8fff] Jul 15 11:49:07.715396 kernel: pci_bus 0000:04: resource 1 [mem 0xfd100000-0xfd1fffff] Jul 15 11:49:07.715470 kernel: pci_bus 0000:04: resource 2 [mem 0xe7800000-0xe78fffff 64bit pref] Jul 15 11:49:07.715563 kernel: pci_bus 0000:05: resource 0 [io 0xc000-0xcfff] Jul 15 11:49:07.715626 kernel: pci_bus 0000:05: resource 1 [mem 0xfcd00000-0xfcdfffff] Jul 15 11:49:07.715671 kernel: pci_bus 0000:05: resource 2 [mem 0xe7400000-0xe74fffff 64bit pref] Jul 15 11:49:07.715721 kernel: pci_bus 0000:06: resource 1 [mem 0xfc900000-0xfc9fffff] Jul 15 11:49:07.715768 kernel: pci_bus 0000:06: resource 2 [mem 0xe7000000-0xe70fffff 64bit pref] Jul 15 11:49:07.715867 kernel: pci_bus 0000:07: resource 1 [mem 0xfc500000-0xfc5fffff] Jul 15 11:49:07.715929 kernel: pci_bus 0000:07: resource 2 [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 15 11:49:07.715998 kernel: pci_bus 0000:08: resource 1 [mem 0xfc100000-0xfc1fffff] Jul 15 11:49:07.716052 kernel: pci_bus 0000:08: resource 2 [mem 0xe6800000-0xe68fffff 64bit pref] Jul 15 11:49:07.716109 kernel: pci_bus 0000:09: resource 1 [mem 0xfbd00000-0xfbdfffff] Jul 15 11:49:07.716162 kernel: pci_bus 0000:09: resource 2 [mem 0xe6400000-0xe64fffff 64bit pref] Jul 15 11:49:07.716219 kernel: pci_bus 0000:0a: resource 1 [mem 0xfb900000-0xfb9fffff] Jul 15 11:49:07.716271 kernel: pci_bus 0000:0a: resource 2 [mem 0xe6000000-0xe60fffff 64bit pref] Jul 15 11:49:07.716329 kernel: pci_bus 0000:0b: resource 0 [io 0x5000-0x5fff] Jul 15 11:49:07.716381 kernel: pci_bus 0000:0b: resource 1 [mem 0xfd400000-0xfd4fffff] Jul 15 11:49:07.716433 kernel: pci_bus 0000:0b: resource 2 [mem 0xc0200000-0xc03fffff 64bit pref] Jul 15 11:49:07.716492 kernel: pci_bus 0000:0c: resource 0 [io 0x9000-0x9fff] Jul 15 11:49:07.716551 kernel: pci_bus 0000:0c: resource 1 [mem 0xfd000000-0xfd0fffff] Jul 15 11:49:07.716601 kernel: pci_bus 0000:0c: resource 2 [mem 0xe7700000-0xe77fffff 64bit pref] Jul 15 11:49:07.716661 kernel: pci_bus 0000:0d: resource 0 [io 0xd000-0xdfff] Jul 15 11:49:07.716710 kernel: pci_bus 0000:0d: resource 1 [mem 0xfcc00000-0xfccfffff] Jul 15 11:49:07.716757 kernel: pci_bus 0000:0d: resource 2 [mem 0xe7300000-0xe73fffff 64bit pref] Jul 15 11:49:07.716809 kernel: pci_bus 0000:0e: resource 1 [mem 0xfc800000-0xfc8fffff] Jul 15 11:49:07.716856 kernel: pci_bus 0000:0e: resource 2 [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 15 11:49:07.716908 kernel: pci_bus 0000:0f: resource 1 [mem 0xfc400000-0xfc4fffff] Jul 15 11:49:07.716956 kernel: pci_bus 0000:0f: resource 2 [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 15 11:49:07.717010 kernel: pci_bus 0000:10: resource 1 [mem 0xfc000000-0xfc0fffff] Jul 15 11:49:07.717071 kernel: pci_bus 0000:10: resource 2 [mem 0xe6700000-0xe67fffff 64bit pref] Jul 15 11:49:07.717127 kernel: pci_bus 0000:11: resource 1 [mem 0xfbc00000-0xfbcfffff] Jul 15 11:49:07.717174 kernel: pci_bus 0000:11: resource 2 [mem 0xe6300000-0xe63fffff 64bit pref] Jul 15 11:49:07.717226 kernel: pci_bus 0000:12: resource 1 [mem 0xfb800000-0xfb8fffff] Jul 15 11:49:07.717274 kernel: pci_bus 0000:12: resource 2 [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 15 11:49:07.717329 kernel: pci_bus 0000:13: resource 0 [io 0x6000-0x6fff] Jul 15 11:49:07.717380 kernel: pci_bus 0000:13: resource 1 [mem 0xfd300000-0xfd3fffff] Jul 15 11:49:07.717428 kernel: pci_bus 0000:13: resource 2 [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 15 11:49:07.717479 kernel: pci_bus 0000:14: resource 0 [io 0xa000-0xafff] Jul 15 11:49:07.717534 kernel: pci_bus 0000:14: resource 1 [mem 0xfcf00000-0xfcffffff] Jul 15 11:49:07.717580 kernel: pci_bus 0000:14: resource 2 [mem 0xe7600000-0xe76fffff 64bit pref] Jul 15 11:49:07.717631 kernel: pci_bus 0000:15: resource 0 [io 0xe000-0xefff] Jul 15 11:49:07.717681 kernel: pci_bus 0000:15: resource 1 [mem 0xfcb00000-0xfcbfffff] Jul 15 11:49:07.717728 kernel: pci_bus 0000:15: resource 2 [mem 0xe7200000-0xe72fffff 64bit pref] Jul 15 11:49:07.717778 kernel: pci_bus 0000:16: resource 1 [mem 0xfc700000-0xfc7fffff] Jul 15 11:49:07.717976 kernel: pci_bus 0000:16: resource 2 [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 15 11:49:07.718040 kernel: pci_bus 0000:17: resource 1 [mem 0xfc300000-0xfc3fffff] Jul 15 11:49:07.718094 kernel: pci_bus 0000:17: resource 2 [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 15 11:49:07.718157 kernel: pci_bus 0000:18: resource 1 [mem 0xfbf00000-0xfbffffff] Jul 15 11:49:07.718216 kernel: pci_bus 0000:18: resource 2 [mem 0xe6600000-0xe66fffff 64bit pref] Jul 15 11:49:07.718270 kernel: pci_bus 0000:19: resource 1 [mem 0xfbb00000-0xfbbfffff] Jul 15 11:49:07.718319 kernel: pci_bus 0000:19: resource 2 [mem 0xe6200000-0xe62fffff 64bit pref] Jul 15 11:49:07.718370 kernel: pci_bus 0000:1a: resource 1 [mem 0xfb700000-0xfb7fffff] Jul 15 11:49:07.718418 kernel: pci_bus 0000:1a: resource 2 [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 15 11:49:07.718473 kernel: pci_bus 0000:1b: resource 0 [io 0x7000-0x7fff] Jul 15 11:49:07.718530 kernel: pci_bus 0000:1b: resource 1 [mem 0xfd200000-0xfd2fffff] Jul 15 11:49:07.718578 kernel: pci_bus 0000:1b: resource 2 [mem 0xe7900000-0xe79fffff 64bit pref] Jul 15 11:49:07.718629 kernel: pci_bus 0000:1c: resource 0 [io 0xb000-0xbfff] Jul 15 11:49:07.718676 kernel: pci_bus 0000:1c: resource 1 [mem 0xfce00000-0xfcefffff] Jul 15 11:49:07.718722 kernel: pci_bus 0000:1c: resource 2 [mem 0xe7500000-0xe75fffff 64bit pref] Jul 15 11:49:07.718774 kernel: pci_bus 0000:1d: resource 1 [mem 0xfca00000-0xfcafffff] Jul 15 11:49:07.718825 kernel: pci_bus 0000:1d: resource 2 [mem 0xe7100000-0xe71fffff 64bit pref] Jul 15 11:49:07.718880 kernel: pci_bus 0000:1e: resource 1 [mem 0xfc600000-0xfc6fffff] Jul 15 11:49:07.718927 kernel: pci_bus 0000:1e: resource 2 [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 15 11:49:07.718978 kernel: pci_bus 0000:1f: resource 1 [mem 0xfc200000-0xfc2fffff] Jul 15 11:49:07.719025 kernel: pci_bus 0000:1f: resource 2 [mem 0xe6900000-0xe69fffff 64bit pref] Jul 15 11:49:07.719075 kernel: pci_bus 0000:20: resource 1 [mem 0xfbe00000-0xfbefffff] Jul 15 11:49:07.719128 kernel: pci_bus 0000:20: resource 2 [mem 0xe6500000-0xe65fffff 64bit pref] Jul 15 11:49:07.719178 kernel: pci_bus 0000:21: resource 1 [mem 0xfba00000-0xfbafffff] Jul 15 11:49:07.719225 kernel: pci_bus 0000:21: resource 2 [mem 0xe6100000-0xe61fffff 64bit pref] Jul 15 11:49:07.719277 kernel: pci_bus 0000:22: resource 1 [mem 0xfb600000-0xfb6fffff] Jul 15 11:49:07.719323 kernel: pci_bus 0000:22: resource 2 [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 15 11:49:07.719380 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 15 11:49:07.719391 kernel: PCI: CLS 32 bytes, default 64 Jul 15 11:49:07.719398 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Jul 15 11:49:07.719405 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 15 11:49:07.719411 kernel: clocksource: Switched to clocksource tsc Jul 15 11:49:07.719418 kernel: Initialise system trusted keyrings Jul 15 11:49:07.719424 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 15 11:49:07.719430 kernel: Key type asymmetric registered Jul 15 11:49:07.719436 kernel: Asymmetric key parser 'x509' registered Jul 15 11:49:07.719444 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 15 11:49:07.719450 kernel: io scheduler mq-deadline registered Jul 15 11:49:07.719456 kernel: io scheduler kyber registered Jul 15 11:49:07.719462 kernel: io scheduler bfq registered Jul 15 11:49:07.719527 kernel: pcieport 0000:00:15.0: PME: Signaling with IRQ 24 Jul 15 11:49:07.719586 kernel: pcieport 0000:00:15.0: pciehp: Slot #160 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.719641 kernel: pcieport 0000:00:15.1: PME: Signaling with IRQ 25 Jul 15 11:49:07.719693 kernel: pcieport 0000:00:15.1: pciehp: Slot #161 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.719745 kernel: pcieport 0000:00:15.2: PME: Signaling with IRQ 26 Jul 15 11:49:07.719799 kernel: pcieport 0000:00:15.2: pciehp: Slot #162 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.719852 kernel: pcieport 0000:00:15.3: PME: Signaling with IRQ 27 Jul 15 11:49:07.719905 kernel: pcieport 0000:00:15.3: pciehp: Slot #163 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.719956 kernel: pcieport 0000:00:15.4: PME: Signaling with IRQ 28 Jul 15 11:49:07.720007 kernel: pcieport 0000:00:15.4: pciehp: Slot #164 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.720062 kernel: pcieport 0000:00:15.5: PME: Signaling with IRQ 29 Jul 15 11:49:07.720112 kernel: pcieport 0000:00:15.5: pciehp: Slot #165 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.720165 kernel: pcieport 0000:00:15.6: PME: Signaling with IRQ 30 Jul 15 11:49:07.720215 kernel: pcieport 0000:00:15.6: pciehp: Slot #166 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.720268 kernel: pcieport 0000:00:15.7: PME: Signaling with IRQ 31 Jul 15 11:49:07.720318 kernel: pcieport 0000:00:15.7: pciehp: Slot #167 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.720373 kernel: pcieport 0000:00:16.0: PME: Signaling with IRQ 32 Jul 15 11:49:07.720429 kernel: pcieport 0000:00:16.0: pciehp: Slot #192 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.720480 kernel: pcieport 0000:00:16.1: PME: Signaling with IRQ 33 Jul 15 11:49:07.720538 kernel: pcieport 0000:00:16.1: pciehp: Slot #193 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.720590 kernel: pcieport 0000:00:16.2: PME: Signaling with IRQ 34 Jul 15 11:49:07.720640 kernel: pcieport 0000:00:16.2: pciehp: Slot #194 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.720691 kernel: pcieport 0000:00:16.3: PME: Signaling with IRQ 35 Jul 15 11:49:07.720745 kernel: pcieport 0000:00:16.3: pciehp: Slot #195 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.720797 kernel: pcieport 0000:00:16.4: PME: Signaling with IRQ 36 Jul 15 11:49:07.720848 kernel: pcieport 0000:00:16.4: pciehp: Slot #196 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.720901 kernel: pcieport 0000:00:16.5: PME: Signaling with IRQ 37 Jul 15 11:49:07.720952 kernel: pcieport 0000:00:16.5: pciehp: Slot #197 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.721008 kernel: pcieport 0000:00:16.6: PME: Signaling with IRQ 38 Jul 15 11:49:07.721059 kernel: pcieport 0000:00:16.6: pciehp: Slot #198 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.721110 kernel: pcieport 0000:00:16.7: PME: Signaling with IRQ 39 Jul 15 11:49:07.721161 kernel: pcieport 0000:00:16.7: pciehp: Slot #199 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.721213 kernel: pcieport 0000:00:17.0: PME: Signaling with IRQ 40 Jul 15 11:49:07.721264 kernel: pcieport 0000:00:17.0: pciehp: Slot #224 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.721318 kernel: pcieport 0000:00:17.1: PME: Signaling with IRQ 41 Jul 15 11:49:07.721382 kernel: pcieport 0000:00:17.1: pciehp: Slot #225 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.721439 kernel: pcieport 0000:00:17.2: PME: Signaling with IRQ 42 Jul 15 11:49:07.721492 kernel: pcieport 0000:00:17.2: pciehp: Slot #226 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.721878 kernel: pcieport 0000:00:17.3: PME: Signaling with IRQ 43 Jul 15 11:49:07.721937 kernel: pcieport 0000:00:17.3: pciehp: Slot #227 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.721994 kernel: pcieport 0000:00:17.4: PME: Signaling with IRQ 44 Jul 15 11:49:07.722046 kernel: pcieport 0000:00:17.4: pciehp: Slot #228 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.722098 kernel: pcieport 0000:00:17.5: PME: Signaling with IRQ 45 Jul 15 11:49:07.722150 kernel: pcieport 0000:00:17.5: pciehp: Slot #229 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.722201 kernel: pcieport 0000:00:17.6: PME: Signaling with IRQ 46 Jul 15 11:49:07.722253 kernel: pcieport 0000:00:17.6: pciehp: Slot #230 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.722308 kernel: pcieport 0000:00:17.7: PME: Signaling with IRQ 47 Jul 15 11:49:07.722361 kernel: pcieport 0000:00:17.7: pciehp: Slot #231 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.722412 kernel: pcieport 0000:00:18.0: PME: Signaling with IRQ 48 Jul 15 11:49:07.722463 kernel: pcieport 0000:00:18.0: pciehp: Slot #256 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.722531 kernel: pcieport 0000:00:18.1: PME: Signaling with IRQ 49 Jul 15 11:49:07.722583 kernel: pcieport 0000:00:18.1: pciehp: Slot #257 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.722637 kernel: pcieport 0000:00:18.2: PME: Signaling with IRQ 50 Jul 15 11:49:07.722688 kernel: pcieport 0000:00:18.2: pciehp: Slot #258 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.722739 kernel: pcieport 0000:00:18.3: PME: Signaling with IRQ 51 Jul 15 11:49:07.722790 kernel: pcieport 0000:00:18.3: pciehp: Slot #259 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.722841 kernel: pcieport 0000:00:18.4: PME: Signaling with IRQ 52 Jul 15 11:49:07.722895 kernel: pcieport 0000:00:18.4: pciehp: Slot #260 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.722947 kernel: pcieport 0000:00:18.5: PME: Signaling with IRQ 53 Jul 15 11:49:07.722998 kernel: pcieport 0000:00:18.5: pciehp: Slot #261 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.723050 kernel: pcieport 0000:00:18.6: PME: Signaling with IRQ 54 Jul 15 11:49:07.723100 kernel: pcieport 0000:00:18.6: pciehp: Slot #262 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.723154 kernel: pcieport 0000:00:18.7: PME: Signaling with IRQ 55 Jul 15 11:49:07.723205 kernel: pcieport 0000:00:18.7: pciehp: Slot #263 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:49:07.723214 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 15 11:49:07.723221 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 15 11:49:07.723227 kernel: 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 15 11:49:07.723233 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBC,PNP0f13:MOUS] at 0x60,0x64 irq 1,12 Jul 15 11:49:07.723240 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 15 11:49:07.723246 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 15 11:49:07.723300 kernel: rtc_cmos 00:01: registered as rtc0 Jul 15 11:49:07.723349 kernel: rtc_cmos 00:01: setting system clock to 2025-07-15T11:49:07 UTC (1752580147) Jul 15 11:49:07.723400 kernel: rtc_cmos 00:01: alarms up to one month, y3k, 114 bytes nvram Jul 15 11:49:07.723409 kernel: intel_pstate: CPU model not supported Jul 15 11:49:07.723416 kernel: NET: Registered PF_INET6 protocol family Jul 15 11:49:07.723422 kernel: Segment Routing with IPv6 Jul 15 11:49:07.723428 kernel: In-situ OAM (IOAM) with IPv6 Jul 15 11:49:07.723434 kernel: NET: Registered PF_PACKET protocol family Jul 15 11:49:07.723442 kernel: Key type dns_resolver registered Jul 15 11:49:07.723448 kernel: IPI shorthand broadcast: enabled Jul 15 11:49:07.723454 kernel: sched_clock: Marking stable (861133742, 222234120)->(1149440597, -66072735) Jul 15 11:49:07.723461 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 15 11:49:07.723468 kernel: registered taskstats version 1 Jul 15 11:49:07.723474 kernel: Loading compiled-in X.509 certificates Jul 15 11:49:07.723480 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.188-flatcar: c4b3a19d3bd6de5654dc12075428550cf6251289' Jul 15 11:49:07.723486 kernel: Key type .fscrypt registered Jul 15 11:49:07.723492 kernel: Key type fscrypt-provisioning registered Jul 15 11:49:07.723618 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 15 11:49:07.723626 kernel: ima: Allocated hash algorithm: sha1 Jul 15 11:49:07.723633 kernel: ima: No architecture policies found Jul 15 11:49:07.723639 kernel: clk: Disabling unused clocks Jul 15 11:49:07.723645 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 15 11:49:07.723651 kernel: Write protecting the kernel read-only data: 28672k Jul 15 11:49:07.723657 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 15 11:49:07.723663 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 15 11:49:07.723669 kernel: Run /init as init process Jul 15 11:49:07.723677 kernel: with arguments: Jul 15 11:49:07.723684 kernel: /init Jul 15 11:49:07.723691 kernel: with environment: Jul 15 11:49:07.723697 kernel: HOME=/ Jul 15 11:49:07.723702 kernel: TERM=linux Jul 15 11:49:07.723708 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 15 11:49:07.723716 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:49:07.723724 systemd[1]: Detected virtualization vmware. Jul 15 11:49:07.723732 systemd[1]: Detected architecture x86-64. Jul 15 11:49:07.723738 systemd[1]: Running in initrd. Jul 15 11:49:07.723744 systemd[1]: No hostname configured, using default hostname. Jul 15 11:49:07.723750 systemd[1]: Hostname set to . Jul 15 11:49:07.723757 systemd[1]: Initializing machine ID from random generator. Jul 15 11:49:07.723763 systemd[1]: Queued start job for default target initrd.target. Jul 15 11:49:07.723769 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:49:07.723775 systemd[1]: Reached target cryptsetup.target. Jul 15 11:49:07.723783 systemd[1]: Reached target paths.target. Jul 15 11:49:07.723789 systemd[1]: Reached target slices.target. Jul 15 11:49:07.723795 systemd[1]: Reached target swap.target. Jul 15 11:49:07.723802 systemd[1]: Reached target timers.target. Jul 15 11:49:07.723808 systemd[1]: Listening on iscsid.socket. Jul 15 11:49:07.723815 systemd[1]: Listening on iscsiuio.socket. Jul 15 11:49:07.723821 systemd[1]: Listening on systemd-journald-audit.socket. Jul 15 11:49:07.723827 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 15 11:49:07.723834 systemd[1]: Listening on systemd-journald.socket. Jul 15 11:49:07.723841 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:49:07.723847 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:49:07.723854 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:49:07.723860 systemd[1]: Reached target sockets.target. Jul 15 11:49:07.723866 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:49:07.723872 systemd[1]: Finished network-cleanup.service. Jul 15 11:49:07.723878 systemd[1]: Starting systemd-fsck-usr.service... Jul 15 11:49:07.723884 systemd[1]: Starting systemd-journald.service... Jul 15 11:49:07.723892 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:49:07.723898 systemd[1]: Starting systemd-resolved.service... Jul 15 11:49:07.723904 systemd[1]: Starting systemd-vconsole-setup.service... Jul 15 11:49:07.723911 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:49:07.723917 systemd[1]: Finished systemd-fsck-usr.service. Jul 15 11:49:07.723923 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:49:07.723929 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:49:07.723936 kernel: audit: type=1130 audit(1752580147.664:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.723944 systemd[1]: Finished systemd-vconsole-setup.service. Jul 15 11:49:07.723951 kernel: audit: type=1130 audit(1752580147.667:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.723957 systemd[1]: Starting dracut-cmdline-ask.service... Jul 15 11:49:07.723964 systemd[1]: Started systemd-resolved.service. Jul 15 11:49:07.723970 kernel: audit: type=1130 audit(1752580147.674:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.723976 systemd[1]: Reached target nss-lookup.target. Jul 15 11:49:07.723983 systemd[1]: Finished dracut-cmdline-ask.service. Jul 15 11:49:07.723989 systemd[1]: Starting dracut-cmdline.service... Jul 15 11:49:07.723997 kernel: audit: type=1130 audit(1752580147.687:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.724003 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 15 11:49:07.724009 kernel: Bridge firewalling registered Jul 15 11:49:07.724019 systemd-journald[216]: Journal started Jul 15 11:49:07.724053 systemd-journald[216]: Runtime Journal (/run/log/journal/3699a85275aa45399cb2244e7563b6ef) is 4.8M, max 38.8M, 34.0M free. Jul 15 11:49:07.664000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.674000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.687000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.658091 systemd-modules-load[217]: Inserted module 'overlay' Jul 15 11:49:07.672542 systemd-resolved[218]: Positive Trust Anchors: Jul 15 11:49:07.728734 systemd[1]: Started systemd-journald.service. Jul 15 11:49:07.728748 kernel: audit: type=1130 audit(1752580147.724:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.724000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.672549 systemd-resolved[218]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:49:07.672569 systemd-resolved[218]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:49:07.674464 systemd-resolved[218]: Defaulting to hostname 'linux'. Jul 15 11:49:07.717077 systemd-modules-load[217]: Inserted module 'br_netfilter' Jul 15 11:49:07.730069 dracut-cmdline[233]: dracut-dracut-053 Jul 15 11:49:07.730069 dracut-cmdline[233]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Jul 15 11:49:07.730069 dracut-cmdline[233]: BEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:49:07.734833 kernel: SCSI subsystem initialized Jul 15 11:49:07.743430 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 15 11:49:07.743469 kernel: device-mapper: uevent: version 1.0.3 Jul 15 11:49:07.743478 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 15 11:49:07.748555 systemd-modules-load[217]: Inserted module 'dm_multipath' Jul 15 11:49:07.748966 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:49:07.749467 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:49:07.752179 kernel: audit: type=1130 audit(1752580147.747:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.747000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.755522 kernel: Loading iSCSI transport class v2.0-870. Jul 15 11:49:07.756563 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:49:07.755000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.759519 kernel: audit: type=1130 audit(1752580147.755:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.767537 kernel: iscsi: registered transport (tcp) Jul 15 11:49:07.784757 kernel: iscsi: registered transport (qla4xxx) Jul 15 11:49:07.784801 kernel: QLogic iSCSI HBA Driver Jul 15 11:49:07.802279 systemd[1]: Finished dracut-cmdline.service. Jul 15 11:49:07.805520 kernel: audit: type=1130 audit(1752580147.800:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.800000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:07.802936 systemd[1]: Starting dracut-pre-udev.service... Jul 15 11:49:07.840524 kernel: raid6: avx2x4 gen() 48114 MB/s Jul 15 11:49:07.857516 kernel: raid6: avx2x4 xor() 21303 MB/s Jul 15 11:49:07.874517 kernel: raid6: avx2x2 gen() 52773 MB/s Jul 15 11:49:07.891524 kernel: raid6: avx2x2 xor() 31395 MB/s Jul 15 11:49:07.908522 kernel: raid6: avx2x1 gen() 44299 MB/s Jul 15 11:49:07.925517 kernel: raid6: avx2x1 xor() 27528 MB/s Jul 15 11:49:07.942514 kernel: raid6: sse2x4 gen() 21073 MB/s Jul 15 11:49:07.959516 kernel: raid6: sse2x4 xor() 11659 MB/s Jul 15 11:49:07.976516 kernel: raid6: sse2x2 gen() 21268 MB/s Jul 15 11:49:07.993517 kernel: raid6: sse2x2 xor() 13217 MB/s Jul 15 11:49:08.010520 kernel: raid6: sse2x1 gen() 17931 MB/s Jul 15 11:49:08.027721 kernel: raid6: sse2x1 xor() 8839 MB/s Jul 15 11:49:08.027761 kernel: raid6: using algorithm avx2x2 gen() 52773 MB/s Jul 15 11:49:08.027769 kernel: raid6: .... xor() 31395 MB/s, rmw enabled Jul 15 11:49:08.028899 kernel: raid6: using avx2x2 recovery algorithm Jul 15 11:49:08.037516 kernel: xor: automatically using best checksumming function avx Jul 15 11:49:08.099609 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 15 11:49:08.102000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:08.104268 systemd[1]: Finished dracut-pre-udev.service. Jul 15 11:49:08.107571 kernel: audit: type=1130 audit(1752580148.102:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:08.104923 systemd[1]: Starting systemd-udevd.service... Jul 15 11:49:08.103000 audit: BPF prog-id=7 op=LOAD Jul 15 11:49:08.103000 audit: BPF prog-id=8 op=LOAD Jul 15 11:49:08.115466 systemd-udevd[416]: Using default interface naming scheme 'v252'. Jul 15 11:49:08.118689 systemd[1]: Started systemd-udevd.service. Jul 15 11:49:08.119212 systemd[1]: Starting dracut-pre-trigger.service... Jul 15 11:49:08.117000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:08.126784 dracut-pre-trigger[421]: rd.md=0: removing MD RAID activation Jul 15 11:49:08.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:08.142918 systemd[1]: Finished dracut-pre-trigger.service. Jul 15 11:49:08.143439 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:49:08.207000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:08.208585 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:49:08.267893 kernel: VMware PVSCSI driver - version 1.0.7.0-k Jul 15 11:49:08.267927 kernel: vmw_pvscsi: using 64bit dma Jul 15 11:49:08.268995 kernel: vmw_pvscsi: max_id: 16 Jul 15 11:49:08.269015 kernel: vmw_pvscsi: setting ring_pages to 8 Jul 15 11:49:08.278515 kernel: libata version 3.00 loaded. Jul 15 11:49:08.281515 kernel: ata_piix 0000:00:07.1: version 2.13 Jul 15 11:49:08.287113 kernel: scsi host1: ata_piix Jul 15 11:49:08.287190 kernel: scsi host2: ata_piix Jul 15 11:49:08.287251 kernel: ata1: PATA max UDMA/33 cmd 0x1f0 ctl 0x3f6 bmdma 0x1060 irq 14 Jul 15 11:49:08.287260 kernel: vmw_pvscsi: enabling reqCallThreshold Jul 15 11:49:08.287267 kernel: ata2: PATA max UDMA/33 cmd 0x170 ctl 0x376 bmdma 0x1068 irq 15 Jul 15 11:49:08.287273 kernel: vmw_pvscsi: driver-based request coalescing enabled Jul 15 11:49:08.287280 kernel: vmw_pvscsi: using MSI-X Jul 15 11:49:08.296538 kernel: scsi host0: VMware PVSCSI storage adapter rev 2, req/cmp/msg rings: 8/8/1 pages, cmd_per_lun=254 Jul 15 11:49:08.297513 kernel: vmw_pvscsi 0000:03:00.0: VMware PVSCSI rev 2 host #0 Jul 15 11:49:08.300475 kernel: scsi 0:0:0:0: Direct-Access VMware Virtual disk 2.0 PQ: 0 ANSI: 6 Jul 15 11:49:08.300570 kernel: VMware vmxnet3 virtual NIC driver - version 1.6.0.0-k-NAPI Jul 15 11:49:08.303237 kernel: vmxnet3 0000:0b:00.0: # of Tx queues : 2, # of Rx queues : 2 Jul 15 11:49:08.303427 kernel: vmxnet3 0000:0b:00.0 eth0: NIC Link is Up 10000 Mbps Jul 15 11:49:08.308514 kernel: cryptd: max_cpu_qlen set to 1000 Jul 15 11:49:08.455568 kernel: ata2.00: ATAPI: VMware Virtual IDE CDROM Drive, 00000001, max UDMA/33 Jul 15 11:49:08.461516 kernel: scsi 2:0:0:0: CD-ROM NECVMWar VMware IDE CDR10 1.00 PQ: 0 ANSI: 5 Jul 15 11:49:08.469518 kernel: AVX2 version of gcm_enc/dec engaged. Jul 15 11:49:08.469555 kernel: AES CTR mode by8 optimization enabled Jul 15 11:49:08.471512 kernel: vmxnet3 0000:0b:00.0 ens192: renamed from eth0 Jul 15 11:49:08.479026 kernel: sd 0:0:0:0: [sda] 17805312 512-byte logical blocks: (9.12 GB/8.49 GiB) Jul 15 11:49:08.545263 kernel: sd 0:0:0:0: [sda] Write Protect is off Jul 15 11:49:08.545341 kernel: sd 0:0:0:0: [sda] Mode Sense: 31 00 00 00 Jul 15 11:49:08.545405 kernel: sd 0:0:0:0: [sda] Cache data unavailable Jul 15 11:49:08.545466 kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through Jul 15 11:49:08.545539 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 15 11:49:08.545552 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Jul 15 11:49:08.566660 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 1x/1x writer dvd-ram cd/rw xa/form2 cdda tray Jul 15 11:49:08.584741 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 15 11:49:08.584754 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 15 11:49:08.707863 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 15 11:49:08.711325 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 15 11:49:08.711632 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (468) Jul 15 11:49:08.711472 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 15 11:49:08.712113 systemd[1]: Starting disk-uuid.service... Jul 15 11:49:08.739513 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:49:08.745335 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 15 11:49:09.751528 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 15 11:49:09.751678 disk-uuid[550]: The operation has completed successfully. Jul 15 11:49:10.128832 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 15 11:49:10.129195 systemd[1]: Finished disk-uuid.service. Jul 15 11:49:10.127000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:10.128000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:10.130188 systemd[1]: Starting verity-setup.service... Jul 15 11:49:10.189522 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Jul 15 11:49:11.034220 systemd[1]: Found device dev-mapper-usr.device. Jul 15 11:49:11.034881 systemd[1]: Mounting sysusr-usr.mount... Jul 15 11:49:11.035949 systemd[1]: Finished verity-setup.service. Jul 15 11:49:11.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.143524 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 15 11:49:11.143925 systemd[1]: Mounted sysusr-usr.mount. Jul 15 11:49:11.144497 systemd[1]: Starting afterburn-network-kargs.service... Jul 15 11:49:11.144965 systemd[1]: Starting ignition-setup.service... Jul 15 11:49:11.176860 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:49:11.176912 kernel: BTRFS info (device sda6): using free space tree Jul 15 11:49:11.176930 kernel: BTRFS info (device sda6): has skinny extents Jul 15 11:49:11.190523 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 15 11:49:11.202837 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 15 11:49:11.210000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.211981 systemd[1]: Finished ignition-setup.service. Jul 15 11:49:11.212651 systemd[1]: Starting ignition-fetch-offline.service... Jul 15 11:49:11.303046 systemd[1]: Finished afterburn-network-kargs.service. Jul 15 11:49:11.301000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.303678 systemd[1]: Starting parse-ip-for-networkd.service... Jul 15 11:49:11.347000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.347000 audit: BPF prog-id=9 op=LOAD Jul 15 11:49:11.348525 systemd[1]: Finished parse-ip-for-networkd.service. Jul 15 11:49:11.349409 systemd[1]: Starting systemd-networkd.service... Jul 15 11:49:11.364817 systemd-networkd[731]: lo: Link UP Jul 15 11:49:11.364822 systemd-networkd[731]: lo: Gained carrier Jul 15 11:49:11.365122 systemd-networkd[731]: Enumeration completed Jul 15 11:49:11.365328 systemd-networkd[731]: ens192: Configuring with /etc/systemd/network/10-dracut-cmdline-99.network. Jul 15 11:49:11.368525 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 15 11:49:11.368665 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 15 11:49:11.364000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.365604 systemd[1]: Started systemd-networkd.service. Jul 15 11:49:11.365752 systemd[1]: Reached target network.target. Jul 15 11:49:11.366266 systemd[1]: Starting iscsiuio.service... Jul 15 11:49:11.367963 systemd-networkd[731]: ens192: Link UP Jul 15 11:49:11.367966 systemd-networkd[731]: ens192: Gained carrier Jul 15 11:49:11.371946 systemd[1]: Started iscsiuio.service. Jul 15 11:49:11.370000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.372625 systemd[1]: Starting iscsid.service... Jul 15 11:49:11.375380 iscsid[736]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:49:11.375380 iscsid[736]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 15 11:49:11.375380 iscsid[736]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 15 11:49:11.375380 iscsid[736]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 15 11:49:11.375380 iscsid[736]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:49:11.375380 iscsid[736]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 15 11:49:11.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.376573 systemd[1]: Started iscsid.service. Jul 15 11:49:11.377368 systemd[1]: Starting dracut-initqueue.service... Jul 15 11:49:11.385237 systemd[1]: Finished dracut-initqueue.service. Jul 15 11:49:11.383000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.385752 systemd[1]: Reached target remote-fs-pre.target. Jul 15 11:49:11.385987 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:49:11.386214 systemd[1]: Reached target remote-fs.target. Jul 15 11:49:11.387177 systemd[1]: Starting dracut-pre-mount.service... Jul 15 11:49:11.392978 systemd[1]: Finished dracut-pre-mount.service. Jul 15 11:49:11.391000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.508039 ignition[602]: Ignition 2.14.0 Jul 15 11:49:11.508328 ignition[602]: Stage: fetch-offline Jul 15 11:49:11.508479 ignition[602]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:49:11.508662 ignition[602]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:49:11.523763 ignition[602]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:49:11.523851 ignition[602]: parsed url from cmdline: "" Jul 15 11:49:11.523853 ignition[602]: no config URL provided Jul 15 11:49:11.523856 ignition[602]: reading system config file "/usr/lib/ignition/user.ign" Jul 15 11:49:11.523864 ignition[602]: no config at "/usr/lib/ignition/user.ign" Jul 15 11:49:11.524245 ignition[602]: config successfully fetched Jul 15 11:49:11.524264 ignition[602]: parsing config with SHA512: 01242d271ac1c7e1faed42d94334c9fdc1a38f67a5331b9720f2ed2e78a7755baa81a0d5225286ce71d001d61e61b2a77abd6b9dbfaf27cebe1d8ea8b36d09cf Jul 15 11:49:11.527149 unknown[602]: fetched base config from "system" Jul 15 11:49:11.527161 unknown[602]: fetched user config from "vmware" Jul 15 11:49:11.527623 ignition[602]: fetch-offline: fetch-offline passed Jul 15 11:49:11.527667 ignition[602]: Ignition finished successfully Jul 15 11:49:11.526000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.528283 systemd[1]: Finished ignition-fetch-offline.service. Jul 15 11:49:11.528437 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 15 11:49:11.528912 systemd[1]: Starting ignition-kargs.service... Jul 15 11:49:11.534722 ignition[750]: Ignition 2.14.0 Jul 15 11:49:11.534729 ignition[750]: Stage: kargs Jul 15 11:49:11.534793 ignition[750]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:49:11.534806 ignition[750]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:49:11.536164 ignition[750]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:49:11.537719 ignition[750]: kargs: kargs passed Jul 15 11:49:11.537750 ignition[750]: Ignition finished successfully Jul 15 11:49:11.538736 systemd[1]: Finished ignition-kargs.service. Jul 15 11:49:11.537000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.539397 systemd[1]: Starting ignition-disks.service... Jul 15 11:49:11.543778 ignition[756]: Ignition 2.14.0 Jul 15 11:49:11.544017 ignition[756]: Stage: disks Jul 15 11:49:11.544203 ignition[756]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:49:11.544360 ignition[756]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:49:11.545701 ignition[756]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:49:11.547376 ignition[756]: disks: disks passed Jul 15 11:49:11.547541 ignition[756]: Ignition finished successfully Jul 15 11:49:11.548142 systemd[1]: Finished ignition-disks.service. Jul 15 11:49:11.548324 systemd[1]: Reached target initrd-root-device.target. Jul 15 11:49:11.546000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.548435 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:49:11.548596 systemd[1]: Reached target local-fs.target. Jul 15 11:49:11.548768 systemd[1]: Reached target sysinit.target. Jul 15 11:49:11.548924 systemd[1]: Reached target basic.target. Jul 15 11:49:11.549600 systemd[1]: Starting systemd-fsck-root.service... Jul 15 11:49:11.577136 systemd-fsck[764]: ROOT: clean, 619/1628000 files, 124060/1617920 blocks Jul 15 11:49:11.579115 systemd[1]: Finished systemd-fsck-root.service. Jul 15 11:49:11.577000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.579707 systemd[1]: Mounting sysroot.mount... Jul 15 11:49:11.591111 systemd[1]: Mounted sysroot.mount. Jul 15 11:49:11.591275 systemd[1]: Reached target initrd-root-fs.target. Jul 15 11:49:11.591518 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 15 11:49:11.593798 systemd[1]: Mounting sysroot-usr.mount... Jul 15 11:49:11.594171 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 15 11:49:11.594201 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 15 11:49:11.594216 systemd[1]: Reached target ignition-diskful.target. Jul 15 11:49:11.596378 systemd[1]: Mounted sysroot-usr.mount. Jul 15 11:49:11.596896 systemd[1]: Starting initrd-setup-root.service... Jul 15 11:49:11.600175 initrd-setup-root[774]: cut: /sysroot/etc/passwd: No such file or directory Jul 15 11:49:11.605715 initrd-setup-root[782]: cut: /sysroot/etc/group: No such file or directory Jul 15 11:49:11.609526 initrd-setup-root[790]: cut: /sysroot/etc/shadow: No such file or directory Jul 15 11:49:11.613009 initrd-setup-root[798]: cut: /sysroot/etc/gshadow: No such file or directory Jul 15 11:49:11.685652 systemd[1]: Finished initrd-setup-root.service. Jul 15 11:49:11.684000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.686278 systemd[1]: Starting ignition-mount.service... Jul 15 11:49:11.686815 systemd[1]: Starting sysroot-boot.service... Jul 15 11:49:11.690780 bash[815]: umount: /sysroot/usr/share/oem: not mounted. Jul 15 11:49:11.695883 ignition[816]: INFO : Ignition 2.14.0 Jul 15 11:49:11.695883 ignition[816]: INFO : Stage: mount Jul 15 11:49:11.696216 ignition[816]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:49:11.696216 ignition[816]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:49:11.697296 ignition[816]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:49:11.698792 ignition[816]: INFO : mount: mount passed Jul 15 11:49:11.698792 ignition[816]: INFO : Ignition finished successfully Jul 15 11:49:11.699466 systemd[1]: Finished ignition-mount.service. Jul 15 11:49:11.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:11.717352 systemd[1]: Finished sysroot-boot.service. Jul 15 11:49:11.715000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:12.099476 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 15 11:49:12.109531 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (825) Jul 15 11:49:12.111563 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:49:12.111581 kernel: BTRFS info (device sda6): using free space tree Jul 15 11:49:12.111589 kernel: BTRFS info (device sda6): has skinny extents Jul 15 11:49:12.117526 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 15 11:49:12.118965 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 15 11:49:12.119507 systemd[1]: Starting ignition-files.service... Jul 15 11:49:12.128336 ignition[845]: INFO : Ignition 2.14.0 Jul 15 11:49:12.128601 ignition[845]: INFO : Stage: files Jul 15 11:49:12.128787 ignition[845]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:49:12.128939 ignition[845]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:49:12.130463 ignition[845]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:49:12.132959 ignition[845]: DEBUG : files: compiled without relabeling support, skipping Jul 15 11:49:12.135658 ignition[845]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 15 11:49:12.135826 ignition[845]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 15 11:49:12.142750 ignition[845]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 15 11:49:12.143022 ignition[845]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 15 11:49:12.146241 unknown[845]: wrote ssh authorized keys file for user: core Jul 15 11:49:12.146471 ignition[845]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 15 11:49:12.148484 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 15 11:49:12.148720 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.13.2-linux-amd64.tar.gz: attempt #1 Jul 15 11:49:12.197026 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 15 11:49:12.366926 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.13.2-linux-amd64.tar.gz" Jul 15 11:49:12.367205 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 15 11:49:12.367646 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 15 11:49:12.367810 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:49:12.367810 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:49:12.367810 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:49:12.367810 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:49:12.367810 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:49:12.368585 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:49:12.368585 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:49:12.368894 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:49:12.368894 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:49:12.368894 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:49:12.368894 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 15 11:49:12.369635 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Jul 15 11:49:12.372744 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1710836303" Jul 15 11:49:12.373426 ignition[845]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1710836303": device or resource busy Jul 15 11:49:12.373426 ignition[845]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem1710836303", trying btrfs: device or resource busy Jul 15 11:49:12.373426 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1710836303" Jul 15 11:49:12.373426 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem1710836303" Jul 15 11:49:12.373426 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem1710836303" Jul 15 11:49:12.373426 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem1710836303" Jul 15 11:49:12.376217 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 15 11:49:12.376217 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:49:12.376217 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET https://extensions.flatcar.org/extensions/kubernetes-v1.31.8-x86-64.raw: attempt #1 Jul 15 11:49:12.375333 systemd[1]: mnt-oem1710836303.mount: Deactivated successfully. Jul 15 11:49:12.659737 systemd-networkd[731]: ens192: Gained IPv6LL Jul 15 11:49:13.211139 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET result: OK Jul 15 11:49:13.465800 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.31.8-x86-64.raw" Jul 15 11:49:13.466068 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 15 11:49:13.466253 ignition[845]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 15 11:49:13.466253 ignition[845]: INFO : files: op(10): [started] processing unit "vmtoolsd.service" Jul 15 11:49:13.466253 ignition[845]: INFO : files: op(10): [finished] processing unit "vmtoolsd.service" Jul 15 11:49:13.466253 ignition[845]: INFO : files: op(11): [started] processing unit "prepare-helm.service" Jul 15 11:49:13.466253 ignition[845]: INFO : files: op(11): op(12): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:49:13.466253 ignition[845]: INFO : files: op(11): op(12): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:49:13.466253 ignition[845]: INFO : files: op(11): [finished] processing unit "prepare-helm.service" Jul 15 11:49:13.466253 ignition[845]: INFO : files: op(13): [started] processing unit "coreos-metadata.service" Jul 15 11:49:13.466253 ignition[845]: INFO : files: op(13): op(14): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:49:13.467977 ignition[845]: INFO : files: op(13): op(14): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:49:13.467977 ignition[845]: INFO : files: op(13): [finished] processing unit "coreos-metadata.service" Jul 15 11:49:13.467977 ignition[845]: INFO : files: op(15): [started] setting preset to enabled for "vmtoolsd.service" Jul 15 11:49:13.467977 ignition[845]: INFO : files: op(15): [finished] setting preset to enabled for "vmtoolsd.service" Jul 15 11:49:13.467977 ignition[845]: INFO : files: op(16): [started] setting preset to enabled for "prepare-helm.service" Jul 15 11:49:13.467977 ignition[845]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-helm.service" Jul 15 11:49:13.467977 ignition[845]: INFO : files: op(17): [started] setting preset to disabled for "coreos-metadata.service" Jul 15 11:49:13.467977 ignition[845]: INFO : files: op(17): op(18): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:49:13.558327 ignition[845]: INFO : files: op(17): op(18): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:49:13.558571 ignition[845]: INFO : files: op(17): [finished] setting preset to disabled for "coreos-metadata.service" Jul 15 11:49:13.558571 ignition[845]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:49:13.558571 ignition[845]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:49:13.558571 ignition[845]: INFO : files: files passed Jul 15 11:49:13.558571 ignition[845]: INFO : Ignition finished successfully Jul 15 11:49:13.559914 systemd[1]: Finished ignition-files.service. Jul 15 11:49:13.562334 kernel: kauditd_printk_skb: 24 callbacks suppressed Jul 15 11:49:13.562357 kernel: audit: type=1130 audit(1752580153.558:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.558000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.560515 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 15 11:49:13.563457 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 15 11:49:13.563908 systemd[1]: Starting ignition-quench.service... Jul 15 11:49:13.566447 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 15 11:49:13.566508 systemd[1]: Finished ignition-quench.service. Jul 15 11:49:13.565000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.567583 initrd-setup-root-after-ignition[871]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 15 11:49:13.572134 kernel: audit: type=1130 audit(1752580153.565:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.572149 kernel: audit: type=1131 audit(1752580153.565:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.572157 kernel: audit: type=1130 audit(1752580153.570:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.565000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.570000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.571938 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 15 11:49:13.572098 systemd[1]: Reached target ignition-complete.target. Jul 15 11:49:13.575345 systemd[1]: Starting initrd-parse-etc.service... Jul 15 11:49:13.584702 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 15 11:49:13.584755 systemd[1]: Finished initrd-parse-etc.service. Jul 15 11:49:13.585162 systemd[1]: Reached target initrd-fs.target. Jul 15 11:49:13.585373 systemd[1]: Reached target initrd.target. Jul 15 11:49:13.592727 kernel: audit: type=1130 audit(1752580153.583:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.592748 kernel: audit: type=1131 audit(1752580153.583:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.583000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.583000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.585605 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 15 11:49:13.586129 systemd[1]: Starting dracut-pre-pivot.service... Jul 15 11:49:13.601123 kernel: audit: type=1130 audit(1752580153.594:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.594000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.595969 systemd[1]: Finished dracut-pre-pivot.service. Jul 15 11:49:13.596602 systemd[1]: Starting initrd-cleanup.service... Jul 15 11:49:13.605267 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 15 11:49:13.605477 systemd[1]: Finished initrd-cleanup.service. Jul 15 11:49:13.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.606187 systemd[1]: Stopped target nss-lookup.target. Jul 15 11:49:13.610752 kernel: audit: type=1130 audit(1752580153.604:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.610776 kernel: audit: type=1131 audit(1752580153.604:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.610982 systemd[1]: Stopped target remote-cryptsetup.target. Jul 15 11:49:13.611301 systemd[1]: Stopped target timers.target. Jul 15 11:49:13.611619 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 15 11:49:13.611822 systemd[1]: Stopped dracut-pre-pivot.service. Jul 15 11:49:13.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.612132 systemd[1]: Stopped target initrd.target. Jul 15 11:49:13.614582 kernel: audit: type=1131 audit(1752580153.610:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.614635 systemd[1]: Stopped target basic.target. Jul 15 11:49:13.614744 systemd[1]: Stopped target ignition-complete.target. Jul 15 11:49:13.614899 systemd[1]: Stopped target ignition-diskful.target. Jul 15 11:49:13.615066 systemd[1]: Stopped target initrd-root-device.target. Jul 15 11:49:13.615239 systemd[1]: Stopped target remote-fs.target. Jul 15 11:49:13.615411 systemd[1]: Stopped target remote-fs-pre.target. Jul 15 11:49:13.615592 systemd[1]: Stopped target sysinit.target. Jul 15 11:49:13.615745 systemd[1]: Stopped target local-fs.target. Jul 15 11:49:13.615898 systemd[1]: Stopped target local-fs-pre.target. Jul 15 11:49:13.616062 systemd[1]: Stopped target swap.target. Jul 15 11:49:13.616227 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 15 11:49:13.614000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.616256 systemd[1]: Stopped dracut-pre-mount.service. Jul 15 11:49:13.616403 systemd[1]: Stopped target cryptsetup.target. Jul 15 11:49:13.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.616545 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 15 11:49:13.615000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.616567 systemd[1]: Stopped dracut-initqueue.service. Jul 15 11:49:13.616760 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 15 11:49:13.616780 systemd[1]: Stopped ignition-fetch-offline.service. Jul 15 11:49:13.616913 systemd[1]: Stopped target paths.target. Jul 15 11:49:13.617071 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 15 11:49:13.621532 systemd[1]: Stopped systemd-ask-password-console.path. Jul 15 11:49:13.621648 systemd[1]: Stopped target slices.target. Jul 15 11:49:13.621826 systemd[1]: Stopped target sockets.target. Jul 15 11:49:13.621990 systemd[1]: iscsid.socket: Deactivated successfully. Jul 15 11:49:13.622008 systemd[1]: Closed iscsid.socket. Jul 15 11:49:13.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.622143 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 15 11:49:13.622168 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 15 11:49:13.622325 systemd[1]: ignition-files.service: Deactivated successfully. Jul 15 11:49:13.622345 systemd[1]: Stopped ignition-files.service. Jul 15 11:49:13.622923 systemd[1]: Stopping ignition-mount.service... Jul 15 11:49:13.620000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.624941 systemd[1]: Stopping iscsiuio.service... Jul 15 11:49:13.624000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.624000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.624000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.625420 systemd[1]: Stopping sysroot-boot.service... Jul 15 11:49:13.625549 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 15 11:49:13.625588 systemd[1]: Stopped systemd-udev-trigger.service. Jul 15 11:49:13.625764 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 15 11:49:13.625791 systemd[1]: Stopped dracut-pre-trigger.service. Jul 15 11:49:13.626109 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 15 11:49:13.626170 systemd[1]: Stopped iscsiuio.service. Jul 15 11:49:13.626354 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 15 11:49:13.626371 systemd[1]: Closed iscsiuio.socket. Jul 15 11:49:13.632783 ignition[884]: INFO : Ignition 2.14.0 Jul 15 11:49:13.632783 ignition[884]: INFO : Stage: umount Jul 15 11:49:13.632783 ignition[884]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:49:13.632783 ignition[884]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:49:13.634024 ignition[884]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:49:13.635813 ignition[884]: INFO : umount: umount passed Jul 15 11:49:13.635926 ignition[884]: INFO : Ignition finished successfully Jul 15 11:49:13.636523 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 15 11:49:13.636583 systemd[1]: Stopped ignition-mount.service. Jul 15 11:49:13.636824 systemd[1]: Stopped target network.target. Jul 15 11:49:13.635000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.636938 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 15 11:49:13.636984 systemd[1]: Stopped ignition-disks.service. Jul 15 11:49:13.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.638000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.641000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.639592 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 15 11:49:13.639616 systemd[1]: Stopped ignition-kargs.service. Jul 15 11:49:13.639721 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 15 11:49:13.639744 systemd[1]: Stopped ignition-setup.service. Jul 15 11:49:13.639907 systemd[1]: Stopping systemd-networkd.service... Jul 15 11:49:13.640278 systemd[1]: Stopping systemd-resolved.service... Jul 15 11:49:13.641268 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 15 11:49:13.642341 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 15 11:49:13.642402 systemd[1]: Stopped systemd-resolved.service. Jul 15 11:49:13.643000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.645066 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 15 11:49:13.645121 systemd[1]: Stopped systemd-networkd.service. Jul 15 11:49:13.645485 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 15 11:49:13.645513 systemd[1]: Closed systemd-networkd.socket. Jul 15 11:49:13.645986 systemd[1]: Stopping network-cleanup.service... Jul 15 11:49:13.645000 audit: BPF prog-id=6 op=UNLOAD Jul 15 11:49:13.647157 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 15 11:49:13.647190 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 15 11:49:13.645000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.647433 systemd[1]: afterburn-network-kargs.service: Deactivated successfully. Jul 15 11:49:13.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.646000 audit: BPF prog-id=9 op=UNLOAD Jul 15 11:49:13.647455 systemd[1]: Stopped afterburn-network-kargs.service. Jul 15 11:49:13.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.647591 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 15 11:49:13.647612 systemd[1]: Stopped systemd-sysctl.service. Jul 15 11:49:13.646000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.647890 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 15 11:49:13.647912 systemd[1]: Stopped systemd-modules-load.service. Jul 15 11:49:13.650167 systemd[1]: Stopping systemd-udevd.service... Jul 15 11:49:13.651193 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 15 11:49:13.651000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.652740 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 15 11:49:13.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.652830 systemd[1]: Stopped systemd-udevd.service. Jul 15 11:49:13.652000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.653151 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 15 11:49:13.653171 systemd[1]: Closed systemd-udevd-control.socket. Jul 15 11:49:13.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.655000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.653285 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 15 11:49:13.653309 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 15 11:49:13.656000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.656000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.653401 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 15 11:49:13.653423 systemd[1]: Stopped dracut-pre-udev.service. Jul 15 11:49:13.653592 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 15 11:49:13.653612 systemd[1]: Stopped dracut-cmdline.service. Jul 15 11:49:13.654241 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 15 11:49:13.654262 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 15 11:49:13.654891 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 15 11:49:13.654989 systemd[1]: systemd-tmpfiles-setup-dev.service: Deactivated successfully. Jul 15 11:49:13.655017 systemd[1]: Stopped systemd-tmpfiles-setup-dev.service. Jul 15 11:49:13.655191 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 15 11:49:13.655212 systemd[1]: Stopped kmod-static-nodes.service. Jul 15 11:49:13.655323 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 15 11:49:13.655346 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 15 11:49:13.656158 systemd[1]: run-credentials-systemd\x2dtmpfiles\x2dsetup\x2ddev.service.mount: Deactivated successfully. Jul 15 11:49:13.656398 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 15 11:49:13.656450 systemd[1]: Stopped network-cleanup.service. Jul 15 11:49:13.658136 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 15 11:49:13.658184 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 15 11:49:13.706076 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 15 11:49:13.706161 systemd[1]: Stopped sysroot-boot.service. Jul 15 11:49:13.704000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.706493 systemd[1]: Reached target initrd-switch-root.target. Jul 15 11:49:13.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:13.706647 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 15 11:49:13.706681 systemd[1]: Stopped initrd-setup-root.service. Jul 15 11:49:13.707342 systemd[1]: Starting initrd-switch-root.service... Jul 15 11:49:13.716410 systemd[1]: Switching root. Jul 15 11:49:13.734855 iscsid[736]: iscsid shutting down. Jul 15 11:49:13.735769 systemd-journald[216]: Received SIGTERM from PID 1 (n/a). Jul 15 11:49:13.735807 systemd-journald[216]: Journal stopped Jul 15 11:49:18.806626 kernel: SELinux: Class mctp_socket not defined in policy. Jul 15 11:49:18.806645 kernel: SELinux: Class anon_inode not defined in policy. Jul 15 11:49:18.806653 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 15 11:49:18.806659 kernel: SELinux: policy capability network_peer_controls=1 Jul 15 11:49:18.806665 kernel: SELinux: policy capability open_perms=1 Jul 15 11:49:18.806670 kernel: SELinux: policy capability extended_socket_class=1 Jul 15 11:49:18.806678 kernel: SELinux: policy capability always_check_network=0 Jul 15 11:49:18.806686 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 15 11:49:18.806691 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 15 11:49:18.806697 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 15 11:49:18.806703 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 15 11:49:18.806710 systemd[1]: Successfully loaded SELinux policy in 132.287ms. Jul 15 11:49:18.806720 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 12.898ms. Jul 15 11:49:18.806727 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:49:18.806735 systemd[1]: Detected virtualization vmware. Jul 15 11:49:18.806742 systemd[1]: Detected architecture x86-64. Jul 15 11:49:18.806748 systemd[1]: Detected first boot. Jul 15 11:49:18.806756 systemd[1]: Initializing machine ID from random generator. Jul 15 11:49:18.806763 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 15 11:49:18.806774 systemd[1]: Populated /etc with preset unit settings. Jul 15 11:49:18.806786 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:49:18.806798 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:49:18.806811 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:49:18.806820 kernel: kauditd_printk_skb: 48 callbacks suppressed Jul 15 11:49:18.806828 kernel: audit: type=1334 audit(1752580158.665:86): prog-id=12 op=LOAD Jul 15 11:49:18.806835 kernel: audit: type=1334 audit(1752580158.665:87): prog-id=3 op=UNLOAD Jul 15 11:49:18.806840 kernel: audit: type=1334 audit(1752580158.665:88): prog-id=13 op=LOAD Jul 15 11:49:18.806846 kernel: audit: type=1334 audit(1752580158.665:89): prog-id=14 op=LOAD Jul 15 11:49:18.806853 kernel: audit: type=1334 audit(1752580158.665:90): prog-id=4 op=UNLOAD Jul 15 11:49:18.806860 kernel: audit: type=1334 audit(1752580158.665:91): prog-id=5 op=UNLOAD Jul 15 11:49:18.806866 kernel: audit: type=1334 audit(1752580158.667:92): prog-id=15 op=LOAD Jul 15 11:49:18.806873 systemd[1]: iscsid.service: Deactivated successfully. Jul 15 11:49:18.806880 kernel: audit: type=1334 audit(1752580158.667:93): prog-id=12 op=UNLOAD Jul 15 11:49:18.806886 systemd[1]: Stopped iscsid.service. Jul 15 11:49:18.806893 kernel: audit: type=1334 audit(1752580158.668:94): prog-id=16 op=LOAD Jul 15 11:49:18.806899 kernel: audit: type=1334 audit(1752580158.669:95): prog-id=17 op=LOAD Jul 15 11:49:18.806905 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 15 11:49:18.806912 systemd[1]: Stopped initrd-switch-root.service. Jul 15 11:49:18.806919 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 15 11:49:18.806927 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 15 11:49:18.806934 systemd[1]: Created slice system-addon\x2drun.slice. Jul 15 11:49:18.806942 systemd[1]: Created slice system-getty.slice. Jul 15 11:49:18.806950 systemd[1]: Created slice system-modprobe.slice. Jul 15 11:49:18.806956 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 15 11:49:18.806963 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 15 11:49:18.806970 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 15 11:49:18.806977 systemd[1]: Created slice user.slice. Jul 15 11:49:18.806984 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:49:18.806992 systemd[1]: Started systemd-ask-password-wall.path. Jul 15 11:49:18.807000 systemd[1]: Set up automount boot.automount. Jul 15 11:49:18.807007 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 15 11:49:18.807013 systemd[1]: Stopped target initrd-switch-root.target. Jul 15 11:49:18.807020 systemd[1]: Stopped target initrd-fs.target. Jul 15 11:49:18.807027 systemd[1]: Stopped target initrd-root-fs.target. Jul 15 11:49:18.807034 systemd[1]: Reached target integritysetup.target. Jul 15 11:49:18.807041 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:49:18.807049 systemd[1]: Reached target remote-fs.target. Jul 15 11:49:18.807056 systemd[1]: Reached target slices.target. Jul 15 11:49:18.807063 systemd[1]: Reached target swap.target. Jul 15 11:49:18.807070 systemd[1]: Reached target torcx.target. Jul 15 11:49:18.807077 systemd[1]: Reached target veritysetup.target. Jul 15 11:49:18.807084 systemd[1]: Listening on systemd-coredump.socket. Jul 15 11:49:18.807090 systemd[1]: Listening on systemd-initctl.socket. Jul 15 11:49:18.807099 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:49:18.807106 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:49:18.807113 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:49:18.807120 systemd[1]: Listening on systemd-userdbd.socket. Jul 15 11:49:18.807127 systemd[1]: Mounting dev-hugepages.mount... Jul 15 11:49:18.807148 systemd[1]: Mounting dev-mqueue.mount... Jul 15 11:49:18.807158 systemd[1]: Mounting media.mount... Jul 15 11:49:18.807166 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:49:18.807173 systemd[1]: Mounting sys-kernel-debug.mount... Jul 15 11:49:18.807180 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 15 11:49:18.807188 systemd[1]: Mounting tmp.mount... Jul 15 11:49:18.807195 systemd[1]: Starting flatcar-tmpfiles.service... Jul 15 11:49:18.807202 systemd[1]: Starting ignition-delete-config.service... Jul 15 11:49:18.807209 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:49:18.807216 systemd[1]: Starting modprobe@configfs.service... Jul 15 11:49:18.807224 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:49:18.807232 systemd[1]: Starting modprobe@drm.service... Jul 15 11:49:18.807238 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:49:18.807248 systemd[1]: Starting modprobe@fuse.service... Jul 15 11:49:18.810272 systemd[1]: Starting modprobe@loop.service... Jul 15 11:49:18.810289 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 15 11:49:18.810298 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 15 11:49:18.810305 systemd[1]: Stopped systemd-fsck-root.service. Jul 15 11:49:18.810313 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 15 11:49:18.810323 systemd[1]: Stopped systemd-fsck-usr.service. Jul 15 11:49:18.810330 systemd[1]: Stopped systemd-journald.service. Jul 15 11:49:18.810338 systemd[1]: Starting systemd-journald.service... Jul 15 11:49:18.810347 kernel: fuse: init (API version 7.34) Jul 15 11:49:18.810359 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:49:18.810372 systemd[1]: Starting systemd-network-generator.service... Jul 15 11:49:18.810386 systemd[1]: Starting systemd-remount-fs.service... Jul 15 11:49:18.810398 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:49:18.810411 systemd[1]: verity-setup.service: Deactivated successfully. Jul 15 11:49:18.810425 systemd[1]: Stopped verity-setup.service. Jul 15 11:49:18.810436 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:49:18.810448 systemd[1]: Mounted dev-hugepages.mount. Jul 15 11:49:18.810460 kernel: loop: module loaded Jul 15 11:49:18.810471 systemd[1]: Mounted dev-mqueue.mount. Jul 15 11:49:18.810482 systemd[1]: Mounted media.mount. Jul 15 11:49:18.810494 systemd[1]: Mounted sys-kernel-debug.mount. Jul 15 11:49:18.810615 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 15 11:49:18.810632 systemd[1]: Mounted tmp.mount. Jul 15 11:49:18.810647 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:49:18.810659 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 15 11:49:18.810671 systemd[1]: Finished modprobe@configfs.service. Jul 15 11:49:18.810683 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:49:18.810695 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:49:18.810705 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:49:18.810716 systemd[1]: Finished modprobe@drm.service. Jul 15 11:49:18.810728 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:49:18.810740 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:49:18.810753 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 15 11:49:18.810766 systemd[1]: Finished modprobe@fuse.service. Jul 15 11:49:18.810777 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:49:18.810789 systemd[1]: Finished modprobe@loop.service. Jul 15 11:49:18.810808 systemd-journald[1005]: Journal started Jul 15 11:49:18.810860 systemd-journald[1005]: Runtime Journal (/run/log/journal/e0a936de82de4cc7ab06fc6e45965906) is 4.8M, max 38.8M, 34.0M free. Jul 15 11:49:14.396000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 15 11:49:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:49:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:49:15.121000 audit: BPF prog-id=10 op=LOAD Jul 15 11:49:15.121000 audit: BPF prog-id=10 op=UNLOAD Jul 15 11:49:15.121000 audit: BPF prog-id=11 op=LOAD Jul 15 11:49:15.121000 audit: BPF prog-id=11 op=UNLOAD Jul 15 11:49:15.364000 audit[917]: AVC avc: denied { associate } for pid=917 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:49:15.364000 audit[917]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c0001178e4 a1=c00002ae40 a2=c000029080 a3=32 items=0 ppid=900 pid=917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:49:15.364000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:49:15.366000 audit[917]: AVC avc: denied { associate } for pid=917 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 15 11:49:15.366000 audit[917]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c0001179b9 a2=1ed a3=0 items=2 ppid=900 pid=917 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:49:15.366000 audit: CWD cwd="/" Jul 15 11:49:15.366000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:15.366000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:15.366000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:49:18.665000 audit: BPF prog-id=12 op=LOAD Jul 15 11:49:18.665000 audit: BPF prog-id=3 op=UNLOAD Jul 15 11:49:18.665000 audit: BPF prog-id=13 op=LOAD Jul 15 11:49:18.665000 audit: BPF prog-id=14 op=LOAD Jul 15 11:49:18.665000 audit: BPF prog-id=4 op=UNLOAD Jul 15 11:49:18.665000 audit: BPF prog-id=5 op=UNLOAD Jul 15 11:49:18.667000 audit: BPF prog-id=15 op=LOAD Jul 15 11:49:18.667000 audit: BPF prog-id=12 op=UNLOAD Jul 15 11:49:18.668000 audit: BPF prog-id=16 op=LOAD Jul 15 11:49:18.669000 audit: BPF prog-id=17 op=LOAD Jul 15 11:49:18.669000 audit: BPF prog-id=13 op=UNLOAD Jul 15 11:49:18.669000 audit: BPF prog-id=14 op=UNLOAD Jul 15 11:49:18.670000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.678000 audit: BPF prog-id=15 op=UNLOAD Jul 15 11:49:18.678000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.681000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.681000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.757000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.761000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.762000 audit: BPF prog-id=18 op=LOAD Jul 15 11:49:18.762000 audit: BPF prog-id=19 op=LOAD Jul 15 11:49:18.763000 audit: BPF prog-id=20 op=LOAD Jul 15 11:49:18.763000 audit: BPF prog-id=16 op=UNLOAD Jul 15 11:49:18.763000 audit: BPF prog-id=17 op=UNLOAD Jul 15 11:49:18.782000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.795000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.797000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.797000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.799000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.799000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.801000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.801000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.801000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 15 11:49:18.801000 audit[1005]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffd35726680 a2=4000 a3=7ffd3572671c items=0 ppid=1 pid=1005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:49:18.801000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 15 11:49:18.803000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.803000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.806000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.806000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.809000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.809000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.665614 systemd[1]: Queued start job for default target multi-user.target. Jul 15 11:49:18.814586 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:49:18.811000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:15.361012 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:49:18.665623 systemd[1]: Unnecessary job was removed for dev-sda6.device. Jul 15 11:49:15.362317 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:49:18.671717 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 15 11:49:15.362330 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:49:15.362352 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 15 11:49:15.362358 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 15 11:49:15.362379 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 15 11:49:15.362390 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 15 11:49:15.362579 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 15 11:49:18.815134 jq[984]: true Jul 15 11:49:15.362604 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:49:15.362612 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:49:15.364477 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 15 11:49:15.364509 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 15 11:49:15.364522 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.100: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.100 Jul 15 11:49:15.364531 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 15 11:49:18.815692 systemd[1]: Started systemd-journald.service. Jul 15 11:49:18.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:15.364541 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.100: no such file or directory" path=/var/lib/torcx/store/3510.3.100 Jul 15 11:49:15.364549 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:15Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 15 11:49:18.047321 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:18Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:49:18.047473 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:18Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:49:18.047540 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:18Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:49:18.047640 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:18Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:49:18.816076 jq[1018]: true Jul 15 11:49:18.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.815000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.047670 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:18Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 15 11:49:18.816213 systemd[1]: Finished systemd-network-generator.service. Jul 15 11:49:18.047712 /usr/lib/systemd/system-generators/torcx-generator[917]: time="2025-07-15T11:49:18Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 15 11:49:18.816574 systemd[1]: Finished systemd-remount-fs.service. Jul 15 11:49:18.817420 systemd[1]: Reached target network-pre.target. Jul 15 11:49:18.818328 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 15 11:49:18.819187 systemd[1]: Mounting sys-kernel-config.mount... Jul 15 11:49:18.820833 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 15 11:49:18.823427 systemd[1]: Starting systemd-hwdb-update.service... Jul 15 11:49:18.824275 systemd[1]: Starting systemd-journal-flush.service... Jul 15 11:49:18.824414 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:49:18.825148 systemd[1]: Starting systemd-random-seed.service... Jul 15 11:49:18.825271 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:49:18.829000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.837287 systemd-journald[1005]: Time spent on flushing to /var/log/journal/e0a936de82de4cc7ab06fc6e45965906 is 19.920ms for 2006 entries. Jul 15 11:49:18.837287 systemd-journald[1005]: System Journal (/var/log/journal/e0a936de82de4cc7ab06fc6e45965906) is 8.0M, max 584.8M, 576.8M free. Jul 15 11:49:18.872294 systemd-journald[1005]: Received client request to flush runtime journal. Jul 15 11:49:18.837000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.871000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.825978 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:49:18.827578 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 15 11:49:18.827722 systemd[1]: Mounted sys-kernel-config.mount. Jul 15 11:49:18.830770 systemd[1]: Finished flatcar-tmpfiles.service. Jul 15 11:49:18.831820 systemd[1]: Starting systemd-sysusers.service... Jul 15 11:49:18.838796 systemd[1]: Finished systemd-random-seed.service. Jul 15 11:49:18.838962 systemd[1]: Reached target first-boot-complete.target. Jul 15 11:49:18.853757 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:49:18.872831 systemd[1]: Finished systemd-journal-flush.service. Jul 15 11:49:18.886000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.887840 systemd[1]: Finished systemd-sysusers.service. Jul 15 11:49:18.888839 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:49:18.947190 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:49:18.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:18.948178 systemd[1]: Starting systemd-udev-settle.service... Jul 15 11:49:18.954229 udevadm[1050]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation-early.service, lvm2-activation.service not to pull it in. Jul 15 11:49:18.970883 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:49:18.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:19.013276 ignition[1027]: Ignition 2.14.0 Jul 15 11:49:19.013758 ignition[1027]: deleting config from guestinfo properties Jul 15 11:49:19.020615 ignition[1027]: Successfully deleted config Jul 15 11:49:19.021328 systemd[1]: Finished ignition-delete-config.service. Jul 15 11:49:19.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ignition-delete-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:19.289224 systemd[1]: Finished systemd-hwdb-update.service. Jul 15 11:49:19.287000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:19.288000 audit: BPF prog-id=21 op=LOAD Jul 15 11:49:19.288000 audit: BPF prog-id=22 op=LOAD Jul 15 11:49:19.288000 audit: BPF prog-id=7 op=UNLOAD Jul 15 11:49:19.288000 audit: BPF prog-id=8 op=UNLOAD Jul 15 11:49:19.290351 systemd[1]: Starting systemd-udevd.service... Jul 15 11:49:19.301998 systemd-udevd[1051]: Using default interface naming scheme 'v252'. Jul 15 11:49:19.323065 systemd[1]: Started systemd-udevd.service. Jul 15 11:49:19.321000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:19.322000 audit: BPF prog-id=23 op=LOAD Jul 15 11:49:19.324359 systemd[1]: Starting systemd-networkd.service... Jul 15 11:49:19.330000 audit: BPF prog-id=24 op=LOAD Jul 15 11:49:19.330000 audit: BPF prog-id=25 op=LOAD Jul 15 11:49:19.330000 audit: BPF prog-id=26 op=LOAD Jul 15 11:49:19.332412 systemd[1]: Starting systemd-userdbd.service... Jul 15 11:49:19.353439 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 15 11:49:19.358997 systemd[1]: Started systemd-userdbd.service. Jul 15 11:49:19.357000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:19.394524 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 15 11:49:19.400684 kernel: ACPI: button: Power Button [PWRF] Jul 15 11:49:19.411105 systemd-networkd[1058]: lo: Link UP Jul 15 11:49:19.411110 systemd-networkd[1058]: lo: Gained carrier Jul 15 11:49:19.411814 systemd-networkd[1058]: Enumeration completed Jul 15 11:49:19.411875 systemd[1]: Started systemd-networkd.service. Jul 15 11:49:19.411885 systemd-networkd[1058]: ens192: Configuring with /etc/systemd/network/00-vmware.network. Jul 15 11:49:19.410000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:19.415047 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 15 11:49:19.415167 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 15 11:49:19.416235 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): ens192: link becomes ready Jul 15 11:49:19.416562 systemd-networkd[1058]: ens192: Link UP Jul 15 11:49:19.416703 systemd-networkd[1058]: ens192: Gained carrier Jul 15 11:49:19.474000 audit[1057]: AVC avc: denied { confidentiality } for pid=1057 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 15 11:49:19.474000 audit[1057]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=55860141b200 a1=338ac a2=7fdfd390dbc5 a3=5 items=110 ppid=1051 pid=1057 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:49:19.474000 audit: CWD cwd="/" Jul 15 11:49:19.474000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=1 name=(null) inode=24898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=2 name=(null) inode=24898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=3 name=(null) inode=24899 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=4 name=(null) inode=24898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=5 name=(null) inode=24900 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=6 name=(null) inode=24898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=7 name=(null) inode=24901 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=8 name=(null) inode=24901 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=9 name=(null) inode=24902 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=10 name=(null) inode=24901 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=11 name=(null) inode=24903 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=12 name=(null) inode=24901 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=13 name=(null) inode=24904 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=14 name=(null) inode=24901 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=15 name=(null) inode=24905 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=16 name=(null) inode=24901 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=17 name=(null) inode=24906 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=18 name=(null) inode=24898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=19 name=(null) inode=24907 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=20 name=(null) inode=24907 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=21 name=(null) inode=24908 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=22 name=(null) inode=24907 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=23 name=(null) inode=24909 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=24 name=(null) inode=24907 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=25 name=(null) inode=24910 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=26 name=(null) inode=24907 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=27 name=(null) inode=24911 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=28 name=(null) inode=24907 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=29 name=(null) inode=24912 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=30 name=(null) inode=24898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=31 name=(null) inode=24913 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=32 name=(null) inode=24913 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=33 name=(null) inode=24914 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=34 name=(null) inode=24913 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=35 name=(null) inode=24915 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=36 name=(null) inode=24913 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=37 name=(null) inode=24916 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=38 name=(null) inode=24913 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=39 name=(null) inode=24917 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=40 name=(null) inode=24913 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=41 name=(null) inode=24918 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=42 name=(null) inode=24898 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=43 name=(null) inode=24919 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=44 name=(null) inode=24919 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=45 name=(null) inode=24920 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=46 name=(null) inode=24919 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=47 name=(null) inode=24921 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=48 name=(null) inode=24919 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=49 name=(null) inode=24922 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=50 name=(null) inode=24919 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=51 name=(null) inode=24923 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=52 name=(null) inode=24919 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=53 name=(null) inode=24924 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=55 name=(null) inode=24925 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=56 name=(null) inode=24925 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=57 name=(null) inode=24926 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=58 name=(null) inode=24925 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=59 name=(null) inode=24927 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=60 name=(null) inode=24925 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=61 name=(null) inode=24928 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=62 name=(null) inode=24928 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=63 name=(null) inode=24929 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.489564 kernel: vmw_vmci 0000:00:07.7: Found VMCI PCI device at 0x11080, irq 16 Jul 15 11:49:19.508864 kernel: piix4_smbus 0000:00:07.3: SMBus Host Controller not enabled! Jul 15 11:49:19.508955 kernel: vmw_vmci 0000:00:07.7: Using capabilities 0xc Jul 15 11:49:19.509031 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input3 Jul 15 11:49:19.509043 kernel: Guest personality initialized and is active Jul 15 11:49:19.474000 audit: PATH item=64 name=(null) inode=24928 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=65 name=(null) inode=24930 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=66 name=(null) inode=24928 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=67 name=(null) inode=24931 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=68 name=(null) inode=24928 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=69 name=(null) inode=24932 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=70 name=(null) inode=24928 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=71 name=(null) inode=24933 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=72 name=(null) inode=24925 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=73 name=(null) inode=24934 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=74 name=(null) inode=24934 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=75 name=(null) inode=24935 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=76 name=(null) inode=24934 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=77 name=(null) inode=24936 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=78 name=(null) inode=24934 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=79 name=(null) inode=24937 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=80 name=(null) inode=24934 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=81 name=(null) inode=24938 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=82 name=(null) inode=24934 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=83 name=(null) inode=24939 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=84 name=(null) inode=24925 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=85 name=(null) inode=24940 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=86 name=(null) inode=24940 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=87 name=(null) inode=24941 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=88 name=(null) inode=24940 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=89 name=(null) inode=24942 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=90 name=(null) inode=24940 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=91 name=(null) inode=24943 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=92 name=(null) inode=24940 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=93 name=(null) inode=24944 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=94 name=(null) inode=24940 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=95 name=(null) inode=24945 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=96 name=(null) inode=24925 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=97 name=(null) inode=24946 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=98 name=(null) inode=24946 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=99 name=(null) inode=24947 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=100 name=(null) inode=24946 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=101 name=(null) inode=24948 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=102 name=(null) inode=24946 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=103 name=(null) inode=24949 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=104 name=(null) inode=24946 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=105 name=(null) inode=24950 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=106 name=(null) inode=24946 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=107 name=(null) inode=24951 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PATH item=109 name=(null) inode=24952 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:49:19.474000 audit: PROCTITLE proctitle="(udev-worker)" Jul 15 11:49:19.510881 kernel: VMCI host device registered (name=vmci, major=10, minor=125) Jul 15 11:49:19.510906 kernel: Initialized host personality Jul 15 11:49:19.515052 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:49:19.516567 (udev-worker)[1053]: id: Truncating stdout of 'dmi_memory_id' up to 16384 byte. Jul 15 11:49:19.517512 kernel: mousedev: PS/2 mouse device common for all mice Jul 15 11:49:19.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:19.553721 systemd[1]: Finished systemd-udev-settle.service. Jul 15 11:49:19.554749 systemd[1]: Starting lvm2-activation-early.service... Jul 15 11:49:19.573351 lvm[1084]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:49:19.597101 systemd[1]: Finished lvm2-activation-early.service. Jul 15 11:49:19.595000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:19.597289 systemd[1]: Reached target cryptsetup.target. Jul 15 11:49:19.598209 systemd[1]: Starting lvm2-activation.service... Jul 15 11:49:19.600812 lvm[1085]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:49:19.628095 systemd[1]: Finished lvm2-activation.service. Jul 15 11:49:19.626000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:19.628281 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:49:19.628388 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 15 11:49:19.628405 systemd[1]: Reached target local-fs.target. Jul 15 11:49:19.628497 systemd[1]: Reached target machines.target. Jul 15 11:49:19.629475 systemd[1]: Starting ldconfig.service... Jul 15 11:49:19.687957 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:49:19.688001 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:49:19.688961 systemd[1]: Starting systemd-boot-update.service... Jul 15 11:49:19.689684 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 15 11:49:19.690635 systemd[1]: Starting systemd-machine-id-commit.service... Jul 15 11:49:19.691498 systemd[1]: Starting systemd-sysext.service... Jul 15 11:49:19.784771 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1087 (bootctl) Jul 15 11:49:19.785568 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 15 11:49:19.791920 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 15 11:49:19.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:19.796290 systemd[1]: Unmounting usr-share-oem.mount... Jul 15 11:49:19.809104 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 15 11:49:19.809216 systemd[1]: Unmounted usr-share-oem.mount. Jul 15 11:49:19.832522 kernel: loop0: detected capacity change from 0 to 221472 Jul 15 11:49:19.939988 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 15 11:49:19.940345 systemd[1]: Finished systemd-machine-id-commit.service. Jul 15 11:49:19.938000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:19.972524 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 15 11:49:20.002523 kernel: loop1: detected capacity change from 0 to 221472 Jul 15 11:49:20.063849 (sd-sysext)[1099]: Using extensions 'kubernetes'. Jul 15 11:49:20.064586 (sd-sysext)[1099]: Merged extensions into '/usr'. Jul 15 11:49:20.076002 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:49:20.077079 systemd[1]: Mounting usr-share-oem.mount... Jul 15 11:49:20.077944 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:49:20.078892 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:49:20.079891 systemd[1]: Starting modprobe@loop.service... Jul 15 11:49:20.080020 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:49:20.081205 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:49:20.081284 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:49:20.083460 systemd[1]: Mounted usr-share-oem.mount. Jul 15 11:49:20.083743 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:49:20.083828 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:49:20.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.084133 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:49:20.082000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.082000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.084213 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:49:20.084542 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:49:20.084622 systemd[1]: Finished modprobe@loop.service. Jul 15 11:49:20.083000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.083000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.084945 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:49:20.085010 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:49:20.088046 systemd[1]: Finished systemd-sysext.service. Jul 15 11:49:20.086000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.089135 systemd[1]: Starting ensure-sysext.service... Jul 15 11:49:20.090258 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 15 11:49:20.095886 systemd[1]: Reloading. Jul 15 11:49:20.097759 systemd-tmpfiles[1106]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 15 11:49:20.098062 systemd-fsck[1096]: fsck.fat 4.2 (2021-01-31) Jul 15 11:49:20.098062 systemd-fsck[1096]: /dev/sda1: 790 files, 120725/258078 clusters Jul 15 11:49:20.100785 systemd-tmpfiles[1106]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 15 11:49:20.102704 systemd-tmpfiles[1106]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 15 11:49:20.137749 /usr/lib/systemd/system-generators/torcx-generator[1126]: time="2025-07-15T11:49:20Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:49:20.137981 /usr/lib/systemd/system-generators/torcx-generator[1126]: time="2025-07-15T11:49:20Z" level=info msg="torcx already run" Jul 15 11:49:20.203593 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:49:20.203608 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:49:20.220439 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:49:20.258000 audit: BPF prog-id=27 op=LOAD Jul 15 11:49:20.259000 audit: BPF prog-id=23 op=UNLOAD Jul 15 11:49:20.259000 audit: BPF prog-id=28 op=LOAD Jul 15 11:49:20.259000 audit: BPF prog-id=29 op=LOAD Jul 15 11:49:20.259000 audit: BPF prog-id=21 op=UNLOAD Jul 15 11:49:20.259000 audit: BPF prog-id=22 op=UNLOAD Jul 15 11:49:20.259000 audit: BPF prog-id=30 op=LOAD Jul 15 11:49:20.259000 audit: BPF prog-id=24 op=UNLOAD Jul 15 11:49:20.259000 audit: BPF prog-id=31 op=LOAD Jul 15 11:49:20.259000 audit: BPF prog-id=32 op=LOAD Jul 15 11:49:20.260000 audit: BPF prog-id=25 op=UNLOAD Jul 15 11:49:20.260000 audit: BPF prog-id=26 op=UNLOAD Jul 15 11:49:20.261000 audit: BPF prog-id=33 op=LOAD Jul 15 11:49:20.261000 audit: BPF prog-id=18 op=UNLOAD Jul 15 11:49:20.261000 audit: BPF prog-id=34 op=LOAD Jul 15 11:49:20.261000 audit: BPF prog-id=35 op=LOAD Jul 15 11:49:20.261000 audit: BPF prog-id=19 op=UNLOAD Jul 15 11:49:20.261000 audit: BPF prog-id=20 op=UNLOAD Jul 15 11:49:20.265230 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 15 11:49:20.263000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.268929 systemd[1]: Mounting boot.mount... Jul 15 11:49:20.271628 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:49:20.272539 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:49:20.274090 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:49:20.275546 systemd[1]: Starting modprobe@loop.service... Jul 15 11:49:20.275771 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:49:20.275853 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:49:20.275945 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:49:20.277295 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:49:20.277447 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:49:20.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.278025 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:49:20.278099 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:49:20.276000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.276000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.278595 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:49:20.278664 systemd[1]: Finished modprobe@loop.service. Jul 15 11:49:20.277000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.277000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.279123 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:49:20.279183 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:49:20.280175 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:49:20.280995 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:49:20.282135 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:49:20.283305 systemd[1]: Starting modprobe@loop.service... Jul 15 11:49:20.284434 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:49:20.284551 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:49:20.284625 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:49:20.286187 systemd[1]: Mounted boot.mount. Jul 15 11:49:20.286595 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:49:20.286673 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:49:20.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.286984 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:49:20.287055 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:49:20.285000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.285000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.287360 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:49:20.287432 systemd[1]: Finished modprobe@loop.service. Jul 15 11:49:20.286000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.286000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.287751 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:49:20.287814 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:49:20.290008 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:49:20.291824 systemd[1]: Starting modprobe@drm.service... Jul 15 11:49:20.292559 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:49:20.293285 systemd[1]: Starting modprobe@loop.service... Jul 15 11:49:20.294386 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:49:20.294469 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:49:20.295418 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 15 11:49:20.296141 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:49:20.296230 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:49:20.294000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.294000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.296717 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:49:20.296790 systemd[1]: Finished modprobe@drm.service. Jul 15 11:49:20.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.297108 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:49:20.297177 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:49:20.295000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.295000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.297476 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:49:20.297566 systemd[1]: Finished modprobe@loop.service. Jul 15 11:49:20.296000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.296000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.297936 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:49:20.297994 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:49:20.300880 systemd[1]: Finished ensure-sysext.service. Jul 15 11:49:20.299000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.305035 systemd[1]: Finished systemd-boot-update.service. Jul 15 11:49:20.303000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.506032 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 15 11:49:20.504000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.507365 systemd[1]: Starting audit-rules.service... Jul 15 11:49:20.508457 systemd[1]: Starting clean-ca-certificates.service... Jul 15 11:49:20.509540 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 15 11:49:20.508000 audit: BPF prog-id=36 op=LOAD Jul 15 11:49:20.511000 audit: BPF prog-id=37 op=LOAD Jul 15 11:49:20.512086 systemd[1]: Starting systemd-resolved.service... Jul 15 11:49:20.513690 systemd[1]: Starting systemd-timesyncd.service... Jul 15 11:49:20.514733 systemd[1]: Starting systemd-update-utmp.service... Jul 15 11:49:20.524000 audit[1204]: SYSTEM_BOOT pid=1204 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.527000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.528653 systemd[1]: Finished clean-ca-certificates.service. Jul 15 11:49:20.528912 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:49:20.529000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.530458 systemd[1]: Finished systemd-update-utmp.service. Jul 15 11:49:20.549000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:49:20.550575 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 15 11:49:20.563829 augenrules[1219]: No rules Jul 15 11:49:20.562000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 15 11:49:20.562000 audit[1219]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffd81ae2560 a2=420 a3=0 items=0 ppid=1199 pid=1219 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:49:20.562000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 15 11:49:20.564457 systemd[1]: Finished audit-rules.service. Jul 15 11:49:20.569164 systemd[1]: Started systemd-timesyncd.service. Jul 15 11:49:20.569323 systemd[1]: Reached target time-set.target. Jul 15 11:49:20.578399 systemd-resolved[1202]: Positive Trust Anchors: Jul 15 11:49:20.578587 systemd-resolved[1202]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:49:20.578649 systemd-resolved[1202]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:49:20.603197 systemd-resolved[1202]: Defaulting to hostname 'linux'. Jul 15 11:49:20.604354 systemd[1]: Started systemd-resolved.service. Jul 15 11:49:20.604523 systemd[1]: Reached target network.target. Jul 15 11:49:20.604610 systemd[1]: Reached target nss-lookup.target. Jul 15 11:50:47.644776 systemd-resolved[1202]: Clock change detected. Flushing caches. Jul 15 11:50:47.644954 systemd-timesyncd[1203]: Contacted time server 66.59.198.178:123 (0.flatcar.pool.ntp.org). Jul 15 11:50:47.645148 systemd-timesyncd[1203]: Initial clock synchronization to Tue 2025-07-15 11:50:47.644738 UTC. Jul 15 11:50:47.711810 ldconfig[1086]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 15 11:50:47.714377 systemd[1]: Finished ldconfig.service. Jul 15 11:50:47.715484 systemd[1]: Starting systemd-update-done.service... Jul 15 11:50:47.719467 systemd[1]: Finished systemd-update-done.service. Jul 15 11:50:47.719625 systemd[1]: Reached target sysinit.target. Jul 15 11:50:47.719786 systemd[1]: Started motdgen.path. Jul 15 11:50:47.719917 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 15 11:50:47.720094 systemd[1]: Started logrotate.timer. Jul 15 11:50:47.720226 systemd[1]: Started mdadm.timer. Jul 15 11:50:47.720306 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 15 11:50:47.720398 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 15 11:50:47.720415 systemd[1]: Reached target paths.target. Jul 15 11:50:47.720546 systemd[1]: Reached target timers.target. Jul 15 11:50:47.720864 systemd[1]: Listening on dbus.socket. Jul 15 11:50:47.722059 systemd[1]: Starting docker.socket... Jul 15 11:50:47.724285 systemd[1]: Listening on sshd.socket. Jul 15 11:50:47.724478 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:50:47.724730 systemd[1]: Listening on docker.socket. Jul 15 11:50:47.724858 systemd[1]: Reached target sockets.target. Jul 15 11:50:47.724943 systemd[1]: Reached target basic.target. Jul 15 11:50:47.725047 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:50:47.725062 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:50:47.726145 systemd[1]: Starting containerd.service... Jul 15 11:50:47.727274 systemd[1]: Starting dbus.service... Jul 15 11:50:47.728301 systemd[1]: Starting enable-oem-cloudinit.service... Jul 15 11:50:47.729237 systemd[1]: Starting extend-filesystems.service... Jul 15 11:50:47.729857 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 15 11:50:47.730506 jq[1230]: false Jul 15 11:50:47.731577 systemd[1]: Starting motdgen.service... Jul 15 11:50:47.733082 systemd[1]: Starting prepare-helm.service... Jul 15 11:50:47.734519 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 15 11:50:47.735974 systemd[1]: Starting sshd-keygen.service... Jul 15 11:50:47.738718 systemd[1]: Starting systemd-logind.service... Jul 15 11:50:47.738828 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:50:47.738869 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 15 11:50:47.739256 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 15 11:50:47.739717 systemd[1]: Starting update-engine.service... Jul 15 11:50:47.740552 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 15 11:50:47.741973 systemd[1]: Starting vmtoolsd.service... Jul 15 11:50:47.744172 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 15 11:50:47.744288 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 15 11:50:47.744894 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 15 11:50:47.744993 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 15 11:50:47.752163 jq[1240]: true Jul 15 11:50:47.754295 systemd[1]: Started vmtoolsd.service. Jul 15 11:50:47.755467 tar[1244]: linux-amd64/helm Jul 15 11:50:47.765538 jq[1247]: true Jul 15 11:50:47.778270 systemd[1]: motdgen.service: Deactivated successfully. Jul 15 11:50:47.778396 systemd[1]: Finished motdgen.service. Jul 15 11:50:47.787138 dbus-daemon[1229]: [system] SELinux support is enabled Jul 15 11:50:47.787408 systemd[1]: Started dbus.service. Jul 15 11:50:47.788719 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 15 11:50:47.788739 systemd[1]: Reached target system-config.target. Jul 15 11:50:47.788860 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 15 11:50:47.788873 systemd[1]: Reached target user-config.target. Jul 15 11:50:47.806488 extend-filesystems[1231]: Found loop1 Jul 15 11:50:47.807059 extend-filesystems[1231]: Found sda Jul 15 11:50:47.807059 extend-filesystems[1231]: Found sda1 Jul 15 11:50:47.807059 extend-filesystems[1231]: Found sda2 Jul 15 11:50:47.807059 extend-filesystems[1231]: Found sda3 Jul 15 11:50:47.807059 extend-filesystems[1231]: Found usr Jul 15 11:50:47.807059 extend-filesystems[1231]: Found sda4 Jul 15 11:50:47.807059 extend-filesystems[1231]: Found sda6 Jul 15 11:50:47.807059 extend-filesystems[1231]: Found sda7 Jul 15 11:50:47.807059 extend-filesystems[1231]: Found sda9 Jul 15 11:50:47.807059 extend-filesystems[1231]: Checking size of /dev/sda9 Jul 15 11:50:47.810079 env[1245]: time="2025-07-15T11:50:47.810041691Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 15 11:50:47.812395 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:50:47.812414 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:50:47.819667 kernel: NET: Registered PF_VSOCK protocol family Jul 15 11:50:47.828074 extend-filesystems[1231]: Old size kept for /dev/sda9 Jul 15 11:50:47.828250 extend-filesystems[1231]: Found sr0 Jul 15 11:50:47.828444 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 15 11:50:47.828566 systemd[1]: Finished extend-filesystems.service. Jul 15 11:50:47.828797 update_engine[1239]: I0715 11:50:47.827481 1239 main.cc:92] Flatcar Update Engine starting Jul 15 11:50:47.830154 systemd[1]: Started update-engine.service. Jul 15 11:50:47.830309 update_engine[1239]: I0715 11:50:47.830192 1239 update_check_scheduler.cc:74] Next update check in 11m29s Jul 15 11:50:47.831411 systemd[1]: Started locksmithd.service. Jul 15 11:50:47.835815 bash[1278]: Updated "/home/core/.ssh/authorized_keys" Jul 15 11:50:47.836262 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 15 11:50:47.871259 systemd-logind[1237]: Watching system buttons on /dev/input/event1 (Power Button) Jul 15 11:50:47.871273 systemd-logind[1237]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 15 11:50:47.871871 systemd-logind[1237]: New seat seat0. Jul 15 11:50:47.872942 systemd[1]: Started systemd-logind.service. Jul 15 11:50:47.886449 env[1245]: time="2025-07-15T11:50:47.886414291Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 15 11:50:47.886520 env[1245]: time="2025-07-15T11:50:47.886510505Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:50:47.887271 env[1245]: time="2025-07-15T11:50:47.887251892Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.188-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:50:47.887271 env[1245]: time="2025-07-15T11:50:47.887268954Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:50:47.887392 env[1245]: time="2025-07-15T11:50:47.887377295Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:50:47.887421 env[1245]: time="2025-07-15T11:50:47.887390960Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 15 11:50:47.887421 env[1245]: time="2025-07-15T11:50:47.887400936Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 15 11:50:47.887421 env[1245]: time="2025-07-15T11:50:47.887407771Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 15 11:50:47.887486 env[1245]: time="2025-07-15T11:50:47.887460671Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:50:47.887610 env[1245]: time="2025-07-15T11:50:47.887598441Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:50:47.887679 env[1245]: time="2025-07-15T11:50:47.887665730Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:50:47.887679 env[1245]: time="2025-07-15T11:50:47.887676579Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 15 11:50:47.887724 env[1245]: time="2025-07-15T11:50:47.887703824Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 15 11:50:47.887724 env[1245]: time="2025-07-15T11:50:47.887711456Z" level=info msg="metadata content store policy set" policy=shared Jul 15 11:50:47.888972 env[1245]: time="2025-07-15T11:50:47.888956113Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 15 11:50:47.889013 env[1245]: time="2025-07-15T11:50:47.888973318Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 15 11:50:47.889013 env[1245]: time="2025-07-15T11:50:47.888985660Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 15 11:50:47.889013 env[1245]: time="2025-07-15T11:50:47.889002953Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 15 11:50:47.889013 env[1245]: time="2025-07-15T11:50:47.889011035Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 15 11:50:47.889076 env[1245]: time="2025-07-15T11:50:47.889019628Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 15 11:50:47.889076 env[1245]: time="2025-07-15T11:50:47.889026416Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 15 11:50:47.889076 env[1245]: time="2025-07-15T11:50:47.889033636Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 15 11:50:47.889076 env[1245]: time="2025-07-15T11:50:47.889040716Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 15 11:50:47.889076 env[1245]: time="2025-07-15T11:50:47.889047531Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 15 11:50:47.889076 env[1245]: time="2025-07-15T11:50:47.889054254Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 15 11:50:47.889076 env[1245]: time="2025-07-15T11:50:47.889066480Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 15 11:50:47.889180 env[1245]: time="2025-07-15T11:50:47.889115895Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 15 11:50:47.889180 env[1245]: time="2025-07-15T11:50:47.889174758Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 15 11:50:47.889325 env[1245]: time="2025-07-15T11:50:47.889312387Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 15 11:50:47.889351 env[1245]: time="2025-07-15T11:50:47.889340395Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889371 env[1245]: time="2025-07-15T11:50:47.889351885Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 15 11:50:47.889389 env[1245]: time="2025-07-15T11:50:47.889382741Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889412 env[1245]: time="2025-07-15T11:50:47.889390608Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889412 env[1245]: time="2025-07-15T11:50:47.889399808Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889412 env[1245]: time="2025-07-15T11:50:47.889408568Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889476 env[1245]: time="2025-07-15T11:50:47.889415378Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889476 env[1245]: time="2025-07-15T11:50:47.889422125Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889476 env[1245]: time="2025-07-15T11:50:47.889428618Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889476 env[1245]: time="2025-07-15T11:50:47.889436988Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889476 env[1245]: time="2025-07-15T11:50:47.889464285Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 15 11:50:47.889557 env[1245]: time="2025-07-15T11:50:47.889531866Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889557 env[1245]: time="2025-07-15T11:50:47.889540964Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889557 env[1245]: time="2025-07-15T11:50:47.889547572Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889557 env[1245]: time="2025-07-15T11:50:47.889554238Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 15 11:50:47.889617 env[1245]: time="2025-07-15T11:50:47.889562358Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 15 11:50:47.889617 env[1245]: time="2025-07-15T11:50:47.889568744Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 15 11:50:47.889617 env[1245]: time="2025-07-15T11:50:47.889591003Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 15 11:50:47.889664 env[1245]: time="2025-07-15T11:50:47.889619998Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 15 11:50:47.889764 env[1245]: time="2025-07-15T11:50:47.889732645Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 15 11:50:47.891709 env[1245]: time="2025-07-15T11:50:47.889767539Z" level=info msg="Connect containerd service" Jul 15 11:50:47.891709 env[1245]: time="2025-07-15T11:50:47.889794706Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 15 11:50:47.891709 env[1245]: time="2025-07-15T11:50:47.890125014Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:50:47.891709 env[1245]: time="2025-07-15T11:50:47.890274488Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 15 11:50:47.891709 env[1245]: time="2025-07-15T11:50:47.890298122Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 15 11:50:47.891709 env[1245]: time="2025-07-15T11:50:47.890845685Z" level=info msg="containerd successfully booted in 0.088560s" Jul 15 11:50:47.890587 systemd[1]: Started containerd.service. Jul 15 11:50:47.893166 env[1245]: time="2025-07-15T11:50:47.893135044Z" level=info msg="Start subscribing containerd event" Jul 15 11:50:47.893195 env[1245]: time="2025-07-15T11:50:47.893177651Z" level=info msg="Start recovering state" Jul 15 11:50:47.893234 env[1245]: time="2025-07-15T11:50:47.893223447Z" level=info msg="Start event monitor" Jul 15 11:50:47.893234 env[1245]: time="2025-07-15T11:50:47.893233734Z" level=info msg="Start snapshots syncer" Jul 15 11:50:47.893280 env[1245]: time="2025-07-15T11:50:47.893239661Z" level=info msg="Start cni network conf syncer for default" Jul 15 11:50:47.893280 env[1245]: time="2025-07-15T11:50:47.893243683Z" level=info msg="Start streaming server" Jul 15 11:50:47.919657 systemd-networkd[1058]: ens192: Gained IPv6LL Jul 15 11:50:47.920810 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 15 11:50:47.921144 systemd[1]: Reached target network-online.target. Jul 15 11:50:47.929166 systemd[1]: Starting kubelet.service... Jul 15 11:50:48.213742 tar[1244]: linux-amd64/LICENSE Jul 15 11:50:48.213874 tar[1244]: linux-amd64/README.md Jul 15 11:50:48.217454 systemd[1]: Finished prepare-helm.service. Jul 15 11:50:48.278382 locksmithd[1289]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 15 11:50:49.350799 sshd_keygen[1258]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 15 11:50:49.363385 systemd[1]: Finished sshd-keygen.service. Jul 15 11:50:49.364763 systemd[1]: Starting issuegen.service... Jul 15 11:50:49.368327 systemd[1]: issuegen.service: Deactivated successfully. Jul 15 11:50:49.368488 systemd[1]: Finished issuegen.service. Jul 15 11:50:49.369800 systemd[1]: Starting systemd-user-sessions.service... Jul 15 11:50:49.381306 systemd[1]: Finished systemd-user-sessions.service. Jul 15 11:50:49.382390 systemd[1]: Started getty@tty1.service. Jul 15 11:50:49.383375 systemd[1]: Started serial-getty@ttyS0.service. Jul 15 11:50:49.383590 systemd[1]: Reached target getty.target. Jul 15 11:50:50.737337 systemd[1]: Started kubelet.service. Jul 15 11:50:50.737816 systemd[1]: Reached target multi-user.target. Jul 15 11:50:50.739595 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 15 11:50:50.744873 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 15 11:50:50.744975 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 15 11:50:50.745162 systemd[1]: Startup finished in 898ms (kernel) + 6.598s (initrd) + 9.599s (userspace) = 17.096s. Jul 15 11:50:51.114061 login[1356]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 15 11:50:51.115416 login[1357]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 15 11:50:51.179882 systemd[1]: Created slice user-500.slice. Jul 15 11:50:51.181832 systemd[1]: Starting user-runtime-dir@500.service... Jul 15 11:50:51.184413 systemd-logind[1237]: New session 2 of user core. Jul 15 11:50:51.187276 systemd-logind[1237]: New session 1 of user core. Jul 15 11:50:51.189821 systemd[1]: Finished user-runtime-dir@500.service. Jul 15 11:50:51.191112 systemd[1]: Starting user@500.service... Jul 15 11:50:51.194072 (systemd)[1363]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:50:51.252065 systemd[1363]: Queued start job for default target default.target. Jul 15 11:50:51.253826 systemd[1363]: Reached target paths.target. Jul 15 11:50:51.253930 systemd[1363]: Reached target sockets.target. Jul 15 11:50:51.253989 systemd[1363]: Reached target timers.target. Jul 15 11:50:51.254049 systemd[1363]: Reached target basic.target. Jul 15 11:50:51.254173 systemd[1]: Started user@500.service. Jul 15 11:50:51.255341 systemd[1]: Started session-1.scope. Jul 15 11:50:51.256002 systemd[1]: Started session-2.scope. Jul 15 11:50:51.256502 systemd[1363]: Reached target default.target. Jul 15 11:50:51.256595 systemd[1363]: Startup finished in 58ms. Jul 15 11:50:51.880157 kubelet[1360]: E0715 11:50:51.880120 1360 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:50:51.881302 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:50:51.881386 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:51:01.945935 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 15 11:51:01.946065 systemd[1]: Stopped kubelet.service. Jul 15 11:51:01.947069 systemd[1]: Starting kubelet.service... Jul 15 11:51:02.266537 systemd[1]: Started kubelet.service. Jul 15 11:51:02.289333 kubelet[1392]: E0715 11:51:02.289308 1392 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:51:02.291338 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:51:02.291415 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:51:12.445925 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 15 11:51:12.446052 systemd[1]: Stopped kubelet.service. Jul 15 11:51:12.447086 systemd[1]: Starting kubelet.service... Jul 15 11:51:12.748612 systemd[1]: Started kubelet.service. Jul 15 11:51:12.803759 kubelet[1402]: E0715 11:51:12.803730 1402 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:51:12.805221 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:51:12.805321 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:51:17.946936 systemd[1]: Created slice system-sshd.slice. Jul 15 11:51:17.948380 systemd[1]: Started sshd@0-139.178.70.107:22-147.75.109.163:44944.service. Jul 15 11:51:18.049520 sshd[1408]: Accepted publickey for core from 147.75.109.163 port 44944 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:51:18.050294 sshd[1408]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:51:18.052920 systemd-logind[1237]: New session 3 of user core. Jul 15 11:51:18.053397 systemd[1]: Started session-3.scope. Jul 15 11:51:18.101152 systemd[1]: Started sshd@1-139.178.70.107:22-147.75.109.163:45080.service. Jul 15 11:51:18.133254 sshd[1413]: Accepted publickey for core from 147.75.109.163 port 45080 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:51:18.134096 sshd[1413]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:51:18.137654 systemd[1]: Started session-4.scope. Jul 15 11:51:18.138034 systemd-logind[1237]: New session 4 of user core. Jul 15 11:51:18.191652 sshd[1413]: pam_unix(sshd:session): session closed for user core Jul 15 11:51:18.193191 systemd[1]: Started sshd@2-139.178.70.107:22-147.75.109.163:45094.service. Jul 15 11:51:18.195595 systemd[1]: sshd@1-139.178.70.107:22-147.75.109.163:45080.service: Deactivated successfully. Jul 15 11:51:18.195972 systemd[1]: session-4.scope: Deactivated successfully. Jul 15 11:51:18.196674 systemd-logind[1237]: Session 4 logged out. Waiting for processes to exit. Jul 15 11:51:18.197101 systemd-logind[1237]: Removed session 4. Jul 15 11:51:18.224069 sshd[1418]: Accepted publickey for core from 147.75.109.163 port 45094 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:51:18.225059 sshd[1418]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:51:18.228137 systemd[1]: Started session-5.scope. Jul 15 11:51:18.228380 systemd-logind[1237]: New session 5 of user core. Jul 15 11:51:18.275095 sshd[1418]: pam_unix(sshd:session): session closed for user core Jul 15 11:51:18.276918 systemd[1]: Started sshd@3-139.178.70.107:22-147.75.109.163:45110.service. Jul 15 11:51:18.277432 systemd[1]: sshd@2-139.178.70.107:22-147.75.109.163:45094.service: Deactivated successfully. Jul 15 11:51:18.277860 systemd[1]: session-5.scope: Deactivated successfully. Jul 15 11:51:18.279586 systemd-logind[1237]: Session 5 logged out. Waiting for processes to exit. Jul 15 11:51:18.280207 systemd-logind[1237]: Removed session 5. Jul 15 11:51:18.307424 sshd[1424]: Accepted publickey for core from 147.75.109.163 port 45110 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:51:18.308205 sshd[1424]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:51:18.311184 systemd[1]: Started session-6.scope. Jul 15 11:51:18.311395 systemd-logind[1237]: New session 6 of user core. Jul 15 11:51:18.361174 sshd[1424]: pam_unix(sshd:session): session closed for user core Jul 15 11:51:18.363601 systemd[1]: Started sshd@4-139.178.70.107:22-147.75.109.163:45122.service. Jul 15 11:51:18.363880 systemd[1]: sshd@3-139.178.70.107:22-147.75.109.163:45110.service: Deactivated successfully. Jul 15 11:51:18.364255 systemd[1]: session-6.scope: Deactivated successfully. Jul 15 11:51:18.364653 systemd-logind[1237]: Session 6 logged out. Waiting for processes to exit. Jul 15 11:51:18.365356 systemd-logind[1237]: Removed session 6. Jul 15 11:51:18.394674 sshd[1430]: Accepted publickey for core from 147.75.109.163 port 45122 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:51:18.395471 sshd[1430]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:51:18.398392 systemd[1]: Started session-7.scope. Jul 15 11:51:18.399237 systemd-logind[1237]: New session 7 of user core. Jul 15 11:51:18.535513 sudo[1434]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 15 11:51:18.535659 sudo[1434]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:51:18.546466 dbus-daemon[1229]: \xd0=\u000c\xbe: received setenforce notice (enforcing=2078866528) Jul 15 11:51:18.546567 sudo[1434]: pam_unix(sudo:session): session closed for user root Jul 15 11:51:18.551612 sshd[1430]: pam_unix(sshd:session): session closed for user core Jul 15 11:51:18.553548 systemd[1]: Started sshd@5-139.178.70.107:22-147.75.109.163:45132.service. Jul 15 11:51:18.553884 systemd[1]: sshd@4-139.178.70.107:22-147.75.109.163:45122.service: Deactivated successfully. Jul 15 11:51:18.554294 systemd[1]: session-7.scope: Deactivated successfully. Jul 15 11:51:18.554685 systemd-logind[1237]: Session 7 logged out. Waiting for processes to exit. Jul 15 11:51:18.555274 systemd-logind[1237]: Removed session 7. Jul 15 11:51:18.584917 sshd[1437]: Accepted publickey for core from 147.75.109.163 port 45132 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:51:18.585688 sshd[1437]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:51:18.588167 systemd-logind[1237]: New session 8 of user core. Jul 15 11:51:18.588652 systemd[1]: Started session-8.scope. Jul 15 11:51:18.637590 sudo[1442]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 15 11:51:18.637729 sudo[1442]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:51:18.639354 sudo[1442]: pam_unix(sudo:session): session closed for user root Jul 15 11:51:18.642124 sudo[1441]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 15 11:51:18.642250 sudo[1441]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:51:18.647907 systemd[1]: Stopping audit-rules.service... Jul 15 11:51:18.647000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:51:18.649553 kernel: kauditd_printk_skb: 234 callbacks suppressed Jul 15 11:51:18.649584 kernel: audit: type=1305 audit(1752580278.647:213): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:51:18.647000 audit[1445]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc02a2eb40 a2=420 a3=0 items=0 ppid=1 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:18.654678 kernel: audit: type=1300 audit(1752580278.647:213): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7ffc02a2eb40 a2=420 a3=0 items=0 ppid=1 pid=1445 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:18.654709 kernel: audit: type=1327 audit(1752580278.647:213): proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:51:18.647000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:51:18.654742 auditctl[1445]: No rules Jul 15 11:51:18.655865 systemd[1]: audit-rules.service: Deactivated successfully. Jul 15 11:51:18.655969 systemd[1]: Stopped audit-rules.service. Jul 15 11:51:18.654000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.657059 systemd[1]: Starting audit-rules.service... Jul 15 11:51:18.660562 kernel: audit: type=1131 audit(1752580278.654:214): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.668867 augenrules[1462]: No rules Jul 15 11:51:18.669301 systemd[1]: Finished audit-rules.service. Jul 15 11:51:18.667000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.669719 sudo[1441]: pam_unix(sudo:session): session closed for user root Jul 15 11:51:18.672453 kernel: audit: type=1130 audit(1752580278.667:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.668000 audit[1441]: USER_END pid=1441 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.675448 kernel: audit: type=1106 audit(1752580278.668:216): pid=1441 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.668000 audit[1441]: CRED_DISP pid=1441 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.677782 systemd[1]: Started sshd@6-139.178.70.107:22-147.75.109.163:45148.service. Jul 15 11:51:18.676015 sshd[1437]: pam_unix(sshd:session): session closed for user core Jul 15 11:51:18.676000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.107:22-147.75.109.163:45148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.680384 systemd[1]: sshd@5-139.178.70.107:22-147.75.109.163:45132.service: Deactivated successfully. Jul 15 11:51:18.680808 systemd[1]: session-8.scope: Deactivated successfully. Jul 15 11:51:18.681828 kernel: audit: type=1104 audit(1752580278.668:217): pid=1441 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.681861 kernel: audit: type=1130 audit(1752580278.676:218): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.107:22-147.75.109.163:45148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.681881 kernel: audit: type=1106 audit(1752580278.678:219): pid=1437 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:51:18.678000 audit[1437]: USER_END pid=1437 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:51:18.681657 systemd-logind[1237]: Session 8 logged out. Waiting for processes to exit. Jul 15 11:51:18.682300 systemd-logind[1237]: Removed session 8. Jul 15 11:51:18.678000 audit[1437]: CRED_DISP pid=1437 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:51:18.688135 kernel: audit: type=1104 audit(1752580278.678:220): pid=1437 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:51:18.679000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-139.178.70.107:22-147.75.109.163:45132 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.711000 audit[1467]: USER_ACCT pid=1467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:51:18.712658 sshd[1467]: Accepted publickey for core from 147.75.109.163 port 45148 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:51:18.711000 audit[1467]: CRED_ACQ pid=1467 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:51:18.711000 audit[1467]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffb7d9de80 a2=3 a3=0 items=0 ppid=1 pid=1467 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:18.711000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:51:18.713699 sshd[1467]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:51:18.716758 systemd[1]: Started session-9.scope. Jul 15 11:51:18.717476 systemd-logind[1237]: New session 9 of user core. Jul 15 11:51:18.718000 audit[1467]: USER_START pid=1467 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:51:18.719000 audit[1470]: CRED_ACQ pid=1470 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:51:18.764000 audit[1471]: USER_ACCT pid=1471 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.765660 sudo[1471]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 15 11:51:18.764000 audit[1471]: CRED_REFR pid=1471 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.765800 sudo[1471]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:51:18.765000 audit[1471]: USER_START pid=1471 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:51:18.782917 systemd[1]: Starting docker.service... Jul 15 11:51:18.808702 env[1481]: time="2025-07-15T11:51:18.807466058Z" level=info msg="Starting up" Jul 15 11:51:18.809546 env[1481]: time="2025-07-15T11:51:18.809533272Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:51:18.809599 env[1481]: time="2025-07-15T11:51:18.809589006Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:51:18.809656 env[1481]: time="2025-07-15T11:51:18.809644299Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:51:18.809702 env[1481]: time="2025-07-15T11:51:18.809691841Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:51:18.811108 env[1481]: time="2025-07-15T11:51:18.811092991Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:51:18.811178 env[1481]: time="2025-07-15T11:51:18.811168292Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:51:18.811230 env[1481]: time="2025-07-15T11:51:18.811218413Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:51:18.811277 env[1481]: time="2025-07-15T11:51:18.811267876Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:51:18.823994 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3009560205-merged.mount: Deactivated successfully. Jul 15 11:51:18.870243 env[1481]: time="2025-07-15T11:51:18.870220236Z" level=info msg="Loading containers: start." Jul 15 11:51:18.975000 audit[1512]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1512 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:18.975000 audit[1512]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7ffddf108ff0 a2=0 a3=7ffddf108fdc items=0 ppid=1481 pid=1512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:18.975000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 15 11:51:18.976000 audit[1514]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1514 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:18.976000 audit[1514]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7ffc30cea5d0 a2=0 a3=7ffc30cea5bc items=0 ppid=1481 pid=1514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:18.976000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 15 11:51:18.977000 audit[1516]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1516 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:18.977000 audit[1516]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffe8bcbdee0 a2=0 a3=7ffe8bcbdecc items=0 ppid=1481 pid=1516 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:18.977000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:51:18.978000 audit[1518]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1518 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:18.978000 audit[1518]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffd61bac840 a2=0 a3=7ffd61bac82c items=0 ppid=1481 pid=1518 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:18.978000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:51:18.983000 audit[1520]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1520 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:18.983000 audit[1520]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffcf8d59220 a2=0 a3=7ffcf8d5920c items=0 ppid=1481 pid=1520 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:18.983000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 15 11:51:19.001000 audit[1525]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1525 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.001000 audit[1525]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffda6828500 a2=0 a3=7ffda68284ec items=0 ppid=1481 pid=1525 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.001000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 15 11:51:19.017000 audit[1527]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1527 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.017000 audit[1527]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffda0a4e340 a2=0 a3=7ffda0a4e32c items=0 ppid=1481 pid=1527 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.017000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 15 11:51:19.018000 audit[1529]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1529 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.018000 audit[1529]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffc34fe87c0 a2=0 a3=7ffc34fe87ac items=0 ppid=1481 pid=1529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.018000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 15 11:51:19.019000 audit[1531]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1531 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.019000 audit[1531]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffd46a77a30 a2=0 a3=7ffd46a77a1c items=0 ppid=1481 pid=1531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.019000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:51:19.035000 audit[1535]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1535 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.035000 audit[1535]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffc5ce3fe80 a2=0 a3=7ffc5ce3fe6c items=0 ppid=1481 pid=1535 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.035000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:51:19.040000 audit[1536]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1536 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.040000 audit[1536]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffcb440c6d0 a2=0 a3=7ffcb440c6bc items=0 ppid=1481 pid=1536 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.040000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:51:19.058456 kernel: Initializing XFRM netlink socket Jul 15 11:51:19.130363 env[1481]: time="2025-07-15T11:51:19.129521198Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 15 11:51:19.161000 audit[1544]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1544 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.161000 audit[1544]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffe0c7ad050 a2=0 a3=7ffe0c7ad03c items=0 ppid=1481 pid=1544 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.161000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 15 11:51:19.173000 audit[1547]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1547 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.173000 audit[1547]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffd849d6400 a2=0 a3=7ffd849d63ec items=0 ppid=1481 pid=1547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.173000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 15 11:51:19.175000 audit[1550]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1550 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.175000 audit[1550]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffec7020d00 a2=0 a3=7ffec7020cec items=0 ppid=1481 pid=1550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.175000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 15 11:51:19.176000 audit[1552]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1552 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.176000 audit[1552]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7ffd2af4f4a0 a2=0 a3=7ffd2af4f48c items=0 ppid=1481 pid=1552 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.176000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 15 11:51:19.178000 audit[1554]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1554 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.178000 audit[1554]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7fff94089d30 a2=0 a3=7fff94089d1c items=0 ppid=1481 pid=1554 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.178000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 15 11:51:19.179000 audit[1556]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1556 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.179000 audit[1556]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffc05e33ad0 a2=0 a3=7ffc05e33abc items=0 ppid=1481 pid=1556 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.179000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 15 11:51:19.180000 audit[1558]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1558 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.180000 audit[1558]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffffe876360 a2=0 a3=7ffffe87634c items=0 ppid=1481 pid=1558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.180000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 15 11:51:19.197000 audit[1561]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1561 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.197000 audit[1561]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffd4550c240 a2=0 a3=7ffd4550c22c items=0 ppid=1481 pid=1561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.197000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 15 11:51:19.198000 audit[1563]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1563 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.198000 audit[1563]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7ffc2b26c330 a2=0 a3=7ffc2b26c31c items=0 ppid=1481 pid=1563 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.198000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:51:19.199000 audit[1565]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1565 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.199000 audit[1565]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffc97726570 a2=0 a3=7ffc9772655c items=0 ppid=1481 pid=1565 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.199000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:51:19.201000 audit[1567]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1567 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.201000 audit[1567]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffdb30f1b40 a2=0 a3=7ffdb30f1b2c items=0 ppid=1481 pid=1567 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.201000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 15 11:51:19.203201 systemd-networkd[1058]: docker0: Link UP Jul 15 11:51:19.211000 audit[1571]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1571 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.211000 audit[1571]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffeff110740 a2=0 a3=7ffeff11072c items=0 ppid=1481 pid=1571 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.211000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:51:19.215000 audit[1572]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1572 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:19.215000 audit[1572]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7fff365ce090 a2=0 a3=7fff365ce07c items=0 ppid=1481 pid=1572 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:19.215000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:51:19.217184 env[1481]: time="2025-07-15T11:51:19.217170169Z" level=info msg="Loading containers: done." Jul 15 11:51:19.222895 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck2657893993-merged.mount: Deactivated successfully. Jul 15 11:51:19.302638 env[1481]: time="2025-07-15T11:51:19.302609241Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 15 11:51:19.302763 env[1481]: time="2025-07-15T11:51:19.302735252Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 15 11:51:19.302805 env[1481]: time="2025-07-15T11:51:19.302793467Z" level=info msg="Daemon has completed initialization" Jul 15 11:51:19.311000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:19.313159 systemd[1]: Started docker.service. Jul 15 11:51:19.317820 env[1481]: time="2025-07-15T11:51:19.317788036Z" level=info msg="API listen on /run/docker.sock" Jul 15 11:51:21.920085 env[1245]: time="2025-07-15T11:51:21.918778726Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\"" Jul 15 11:51:22.571997 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2374168669.mount: Deactivated successfully. Jul 15 11:51:22.946058 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 15 11:51:22.946185 systemd[1]: Stopped kubelet.service. Jul 15 11:51:22.944000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:22.944000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:22.947267 systemd[1]: Starting kubelet.service... Jul 15 11:51:23.017244 systemd[1]: Started kubelet.service. Jul 15 11:51:23.015000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:23.178775 kubelet[1609]: E0715 11:51:23.178727 1609 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:51:23.179821 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:51:23.179924 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:51:23.178000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:51:24.112964 env[1245]: time="2025-07-15T11:51:24.112937835Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:24.116863 env[1245]: time="2025-07-15T11:51:24.116847866Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:24.119421 env[1245]: time="2025-07-15T11:51:24.119391624Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:24.121676 env[1245]: time="2025-07-15T11:51:24.121663091Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:083d7d64af31cd090f870eb49fb815e6bb42c175fc602ee9dae2f28f082bd4dc,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:24.122607 env[1245]: time="2025-07-15T11:51:24.122157175Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.31.10\" returns image reference \"sha256:74c5154ea84d9a53c406e6c00e53cf66145cce821fd80e3c74e2e1bf312f3977\"" Jul 15 11:51:24.123033 env[1245]: time="2025-07-15T11:51:24.123016226Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\"" Jul 15 11:51:25.716335 env[1245]: time="2025-07-15T11:51:25.716289937Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:25.721794 env[1245]: time="2025-07-15T11:51:25.721769522Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:25.724513 env[1245]: time="2025-07-15T11:51:25.724492929Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:25.726358 env[1245]: time="2025-07-15T11:51:25.726334723Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:3c67387d023c6114879f1e817669fd641797d30f117230682faf3930ecaaf0fe,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:25.727045 env[1245]: time="2025-07-15T11:51:25.727022650Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.31.10\" returns image reference \"sha256:c285c4e62c91c434e9928bee7063b361509f43f43faa31641b626d6eff97616d\"" Jul 15 11:51:25.727420 env[1245]: time="2025-07-15T11:51:25.727397461Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\"" Jul 15 11:51:27.051299 env[1245]: time="2025-07-15T11:51:27.051259070Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:27.091640 env[1245]: time="2025-07-15T11:51:27.091603095Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:27.111123 env[1245]: time="2025-07-15T11:51:27.111086232Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:27.131210 env[1245]: time="2025-07-15T11:51:27.131171483Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:284dc2a5cf6afc9b76e39ad4b79c680c23d289488517643b28784a06d0141272,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:27.131838 env[1245]: time="2025-07-15T11:51:27.131812213Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.31.10\" returns image reference \"sha256:61daeb7d112d9547792027cb16242b1d131f357f511545477381457fff5a69e2\"" Jul 15 11:51:27.132215 env[1245]: time="2025-07-15T11:51:27.132192363Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\"" Jul 15 11:51:28.328079 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2593846197.mount: Deactivated successfully. Jul 15 11:51:28.920744 env[1245]: time="2025-07-15T11:51:28.920702368Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:28.935854 env[1245]: time="2025-07-15T11:51:28.935819663Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:28.955384 env[1245]: time="2025-07-15T11:51:28.955353252Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.31.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:28.973182 env[1245]: time="2025-07-15T11:51:28.973154077Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:bcbb293812bdf587b28ea98369a8c347ca84884160046296761acdf12b27029d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:28.973627 env[1245]: time="2025-07-15T11:51:28.973598484Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.31.10\" returns image reference \"sha256:3ed600862d3e69931e0f9f4dbf5c2b46343af40aa079772434f13de771bdc30c\"" Jul 15 11:51:28.974320 env[1245]: time="2025-07-15T11:51:28.974296768Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\"" Jul 15 11:51:29.543710 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4153108886.mount: Deactivated successfully. Jul 15 11:51:30.675319 env[1245]: time="2025-07-15T11:51:30.675276571Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:30.698818 env[1245]: time="2025-07-15T11:51:30.698781982Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:30.721336 env[1245]: time="2025-07-15T11:51:30.721314149Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.11.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:30.739195 env[1245]: time="2025-07-15T11:51:30.739166472Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:9caabbf6238b189a65d0d6e6ac138de60d6a1c419e5a341fbbb7c78382559c6e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:30.740390 env[1245]: time="2025-07-15T11:51:30.739942959Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.11.3\" returns image reference \"sha256:c69fa2e9cbf5f42dc48af631e956d3f95724c13f91596bc567591790e5e36db6\"" Jul 15 11:51:30.741047 env[1245]: time="2025-07-15T11:51:30.741030946Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 15 11:51:31.299176 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1929535694.mount: Deactivated successfully. Jul 15 11:51:31.312449 env[1245]: time="2025-07-15T11:51:31.312411508Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:31.316059 env[1245]: time="2025-07-15T11:51:31.316042306Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:31.318484 env[1245]: time="2025-07-15T11:51:31.318470968Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:31.323137 env[1245]: time="2025-07-15T11:51:31.323122875Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:31.323469 env[1245]: time="2025-07-15T11:51:31.323437124Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 15 11:51:31.323812 env[1245]: time="2025-07-15T11:51:31.323800503Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\"" Jul 15 11:51:31.885757 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2418134500.mount: Deactivated successfully. Jul 15 11:51:32.663272 update_engine[1239]: I0715 11:51:32.663219 1239 update_attempter.cc:509] Updating boot flags... Jul 15 11:51:33.195873 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 15 11:51:33.202025 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 15 11:51:33.202065 kernel: audit: type=1130 audit(1752580293.195:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:33.202092 kernel: audit: type=1131 audit(1752580293.195:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:33.195000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:33.195000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:33.196000 systemd[1]: Stopped kubelet.service. Jul 15 11:51:33.199360 systemd[1]: Starting kubelet.service... Jul 15 11:51:34.799699 env[1245]: time="2025-07-15T11:51:34.799659092Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:34.914630 env[1245]: time="2025-07-15T11:51:34.914586500Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:35.005010 env[1245]: time="2025-07-15T11:51:35.004895593Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.15-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:35.090382 env[1245]: time="2025-07-15T11:51:35.090071807Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.15-0\" returns image reference \"sha256:2e96e5913fc06e3d26915af3d0f2ca5048cc4b6327e661e80da792cbf8d8d9d4\"" Jul 15 11:51:35.091678 env[1245]: time="2025-07-15T11:51:35.090534842Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:a6dc63e6e8cfa0307d7851762fa6b629afb18f28d8aa3fab5a6e91b4af60026a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:36.383365 systemd[1]: Started kubelet.service. Jul 15 11:51:36.382000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:36.387478 kernel: audit: type=1130 audit(1752580296.382:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:36.425458 kubelet[1650]: E0715 11:51:36.425416 1650 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:51:36.426000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:51:36.427355 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:51:36.427431 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:51:36.430475 kernel: audit: type=1131 audit(1752580296.426:262): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:51:37.777000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:37.779331 systemd[1]: Stopped kubelet.service. Jul 15 11:51:37.777000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:37.782050 systemd[1]: Starting kubelet.service... Jul 15 11:51:37.784723 kernel: audit: type=1130 audit(1752580297.777:263): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:37.784756 kernel: audit: type=1131 audit(1752580297.777:264): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:37.802329 systemd[1]: Reloading. Jul 15 11:51:37.845425 /usr/lib/systemd/system-generators/torcx-generator[1682]: time="2025-07-15T11:51:37Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:51:37.845667 /usr/lib/systemd/system-generators/torcx-generator[1682]: time="2025-07-15T11:51:37Z" level=info msg="torcx already run" Jul 15 11:51:37.904011 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:51:37.904135 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:51:37.915912 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:51:37.969122 kernel: audit: type=1400 audit(1752580297.962:265): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.969196 kernel: audit: type=1400 audit(1752580297.962:266): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974189 kernel: audit: type=1400 audit(1752580297.962:267): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974231 kernel: audit: type=1400 audit(1752580297.962:268): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.962000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.962000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.967000 audit: BPF prog-id=43 op=LOAD Jul 15 11:51:37.967000 audit: BPF prog-id=27 op=UNLOAD Jul 15 11:51:37.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.967000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.967000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.970000 audit: BPF prog-id=44 op=LOAD Jul 15 11:51:37.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.970000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.970000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.972000 audit: BPF prog-id=45 op=LOAD Jul 15 11:51:37.972000 audit: BPF prog-id=28 op=UNLOAD Jul 15 11:51:37.972000 audit: BPF prog-id=29 op=UNLOAD Jul 15 11:51:37.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.972000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.972000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit: BPF prog-id=46 op=LOAD Jul 15 11:51:37.973000 audit: BPF prog-id=37 op=UNLOAD Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit: BPF prog-id=47 op=LOAD Jul 15 11:51:37.973000 audit: BPF prog-id=30 op=UNLOAD Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit: BPF prog-id=48 op=LOAD Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit: BPF prog-id=49 op=LOAD Jul 15 11:51:37.973000 audit: BPF prog-id=31 op=UNLOAD Jul 15 11:51:37.973000 audit: BPF prog-id=32 op=UNLOAD Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.973000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974000 audit: BPF prog-id=50 op=LOAD Jul 15 11:51:37.974000 audit: BPF prog-id=41 op=UNLOAD Jul 15 11:51:37.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.974000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit: BPF prog-id=51 op=LOAD Jul 15 11:51:37.975000 audit: BPF prog-id=38 op=UNLOAD Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit: BPF prog-id=52 op=LOAD Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit: BPF prog-id=53 op=LOAD Jul 15 11:51:37.975000 audit: BPF prog-id=39 op=UNLOAD Jul 15 11:51:37.975000 audit: BPF prog-id=40 op=UNLOAD Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.975000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit: BPF prog-id=54 op=LOAD Jul 15 11:51:37.976000 audit: BPF prog-id=36 op=UNLOAD Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit: BPF prog-id=55 op=LOAD Jul 15 11:51:37.976000 audit: BPF prog-id=33 op=UNLOAD Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.976000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit: BPF prog-id=56 op=LOAD Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:37.977000 audit: BPF prog-id=57 op=LOAD Jul 15 11:51:37.977000 audit: BPF prog-id=34 op=UNLOAD Jul 15 11:51:37.977000 audit: BPF prog-id=35 op=UNLOAD Jul 15 11:51:38.024482 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 15 11:51:38.024539 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 15 11:51:38.024690 systemd[1]: Stopped kubelet.service. Jul 15 11:51:38.023000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:51:38.026095 systemd[1]: Starting kubelet.service... Jul 15 11:51:39.100612 systemd[1]: Started kubelet.service. Jul 15 11:51:39.102181 kernel: kauditd_printk_skb: 169 callbacks suppressed Jul 15 11:51:39.102221 kernel: audit: type=1130 audit(1752580299.099:438): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:39.099000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:39.277444 kubelet[1746]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:51:39.277682 kubelet[1746]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 15 11:51:39.277724 kubelet[1746]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:51:39.277822 kubelet[1746]: I0715 11:51:39.277799 1746 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:51:39.546243 kubelet[1746]: I0715 11:51:39.546214 1746 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 15 11:51:39.546243 kubelet[1746]: I0715 11:51:39.546240 1746 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:51:39.546505 kubelet[1746]: I0715 11:51:39.546491 1746 server.go:934] "Client rotation is on, will bootstrap in background" Jul 15 11:51:39.801433 kubelet[1746]: E0715 11:51:39.801232 1746 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://139.178.70.107:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:39.819187 kubelet[1746]: I0715 11:51:39.819149 1746 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:51:39.824532 kubelet[1746]: E0715 11:51:39.824496 1746 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:51:39.824532 kubelet[1746]: I0715 11:51:39.824528 1746 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:51:39.831476 kubelet[1746]: I0715 11:51:39.831453 1746 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:51:39.835499 kubelet[1746]: I0715 11:51:39.835480 1746 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 15 11:51:39.835608 kubelet[1746]: I0715 11:51:39.835581 1746 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:51:39.835736 kubelet[1746]: I0715 11:51:39.835608 1746 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:51:39.835807 kubelet[1746]: I0715 11:51:39.835742 1746 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:51:39.835807 kubelet[1746]: I0715 11:51:39.835750 1746 container_manager_linux.go:300] "Creating device plugin manager" Jul 15 11:51:39.835849 kubelet[1746]: I0715 11:51:39.835826 1746 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:51:39.887224 kubelet[1746]: W0715 11:51:39.887189 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://139.178.70.107:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 139.178.70.107:6443: connect: connection refused Jul 15 11:51:39.887372 kubelet[1746]: E0715 11:51:39.887360 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://139.178.70.107:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:39.889660 kubelet[1746]: I0715 11:51:39.889643 1746 kubelet.go:408] "Attempting to sync node with API server" Jul 15 11:51:39.889707 kubelet[1746]: I0715 11:51:39.889668 1746 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:51:39.889707 kubelet[1746]: I0715 11:51:39.889692 1746 kubelet.go:314] "Adding apiserver pod source" Jul 15 11:51:39.889707 kubelet[1746]: I0715 11:51:39.889706 1746 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:51:39.915040 kubelet[1746]: I0715 11:51:39.915011 1746 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:51:39.915509 kubelet[1746]: I0715 11:51:39.915491 1746 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:51:39.924918 kubelet[1746]: W0715 11:51:39.924895 1746 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 15 11:51:39.937153 kubelet[1746]: I0715 11:51:39.937138 1746 server.go:1274] "Started kubelet" Jul 15 11:51:39.946638 kubelet[1746]: W0715 11:51:39.946588 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://139.178.70.107:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 139.178.70.107:6443: connect: connection refused Jul 15 11:51:39.946712 kubelet[1746]: E0715 11:51:39.946652 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://139.178.70.107:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:39.945000 audit[1746]: AVC avc: denied { mac_admin } for pid=1746 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:39.948802 kubelet[1746]: I0715 11:51:39.948143 1746 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:51:39.948802 kubelet[1746]: I0715 11:51:39.948216 1746 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 15 11:51:39.948802 kubelet[1746]: I0715 11:51:39.948277 1746 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:51:39.945000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:51:39.951160 kernel: audit: type=1400 audit(1752580299.945:439): avc: denied { mac_admin } for pid=1746 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:39.951192 kernel: audit: type=1401 audit(1752580299.945:439): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:51:39.951212 kernel: audit: type=1300 audit(1752580299.945:439): arch=c000003e syscall=188 success=no exit=-22 a0=c000825590 a1=c000828bd0 a2=c000825560 a3=25 items=0 ppid=1 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:39.945000 audit[1746]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000825590 a1=c000828bd0 a2=c000825560 a3=25 items=0 ppid=1 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:39.945000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:51:39.958051 kernel: audit: type=1327 audit(1752580299.945:439): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:51:39.958094 kernel: audit: type=1400 audit(1752580299.946:440): avc: denied { mac_admin } for pid=1746 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:39.946000 audit[1746]: AVC avc: denied { mac_admin } for pid=1746 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:39.958253 kubelet[1746]: I0715 11:51:39.958237 1746 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:51:39.959127 kubelet[1746]: I0715 11:51:39.959116 1746 server.go:449] "Adding debug handlers to kubelet server" Jul 15 11:51:39.946000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:51:39.961811 kernel: audit: type=1401 audit(1752580299.946:440): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:51:39.961846 kernel: audit: type=1300 audit(1752580299.946:440): arch=c000003e syscall=188 success=no exit=-22 a0=c000a5a320 a1=c000828be8 a2=c000825620 a3=25 items=0 ppid=1 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:39.946000 audit[1746]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a5a320 a1=c000828be8 a2=c000825620 a3=25 items=0 ppid=1 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:39.965500 kernel: audit: type=1327 audit(1752580299.946:440): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:51:39.946000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:51:39.955000 audit[1757]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:39.970527 kernel: audit: type=1325 audit(1752580299.955:441): table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1757 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:39.955000 audit[1757]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffea9b47230 a2=0 a3=7ffea9b4721c items=0 ppid=1746 pid=1757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:39.955000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:51:39.955000 audit[1758]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1758 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:39.955000 audit[1758]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe9f51c7f0 a2=0 a3=7ffe9f51c7dc items=0 ppid=1746 pid=1758 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:39.955000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:51:39.999054 kubelet[1746]: E0715 11:51:39.990427 1746 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.107:6443/api/v1/namespaces/default/events\": dial tcp 139.178.70.107:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18526a7f4a197a5e default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:51:39.937118814 +0000 UTC m=+0.830548936,LastTimestamp:2025-07-15 11:51:39.937118814 +0000 UTC m=+0.830548936,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:51:40.005694 kubelet[1746]: I0715 11:51:40.005664 1746 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:51:40.005838 kubelet[1746]: I0715 11:51:40.005825 1746 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:51:40.005975 kubelet[1746]: I0715 11:51:40.005962 1746 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:51:40.007590 kubelet[1746]: I0715 11:51:40.007579 1746 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 15 11:51:40.007704 kubelet[1746]: E0715 11:51:40.007692 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:40.009684 kubelet[1746]: I0715 11:51:40.009673 1746 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:51:40.009789 kubelet[1746]: I0715 11:51:40.009779 1746 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:51:40.010030 kubelet[1746]: E0715 11:51:40.010018 1746 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.107:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.107:6443: connect: connection refused" interval="200ms" Jul 15 11:51:40.007000 audit[1760]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1760 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:40.007000 audit[1760]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fff31886440 a2=0 a3=7fff3188642c items=0 ppid=1746 pid=1760 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:40.007000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:51:40.010620 kubelet[1746]: I0715 11:51:40.010587 1746 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 15 11:51:40.010650 kubelet[1746]: I0715 11:51:40.010621 1746 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:51:40.010942 kubelet[1746]: I0715 11:51:40.010933 1746 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:51:40.009000 audit[1762]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1762 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:40.009000 audit[1762]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffde3d9f420 a2=0 a3=7ffde3d9f40c items=0 ppid=1746 pid=1762 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:40.009000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:51:40.026596 kubelet[1746]: E0715 11:51:40.026580 1746 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:51:40.026852 kubelet[1746]: W0715 11:51:40.026815 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://139.178.70.107:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 139.178.70.107:6443: connect: connection refused Jul 15 11:51:40.026915 kubelet[1746]: E0715 11:51:40.026905 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://139.178.70.107:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:40.030423 kubelet[1746]: I0715 11:51:40.030414 1746 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 15 11:51:40.030541 kubelet[1746]: I0715 11:51:40.030535 1746 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 15 11:51:40.030600 kubelet[1746]: I0715 11:51:40.030594 1746 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:51:40.035314 kubelet[1746]: I0715 11:51:40.035305 1746 policy_none.go:49] "None policy: Start" Jul 15 11:51:40.037071 kubelet[1746]: I0715 11:51:40.037055 1746 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 15 11:51:40.037071 kubelet[1746]: I0715 11:51:40.037072 1746 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:51:40.036000 audit[1769]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1769 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:40.036000 audit[1769]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7ffcb2355f60 a2=0 a3=7ffcb2355f4c items=0 ppid=1746 pid=1769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:40.036000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 15 11:51:40.037000 audit[1770]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1770 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:40.037000 audit[1770]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffebea44f70 a2=0 a3=7ffebea44f5c items=0 ppid=1746 pid=1770 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:40.037000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:51:40.038956 kubelet[1746]: I0715 11:51:40.038168 1746 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:51:40.038956 kubelet[1746]: I0715 11:51:40.038940 1746 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:51:40.038956 kubelet[1746]: I0715 11:51:40.038950 1746 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 15 11:51:40.039031 kubelet[1746]: I0715 11:51:40.038960 1746 kubelet.go:2321] "Starting kubelet main sync loop" Jul 15 11:51:40.039031 kubelet[1746]: E0715 11:51:40.038985 1746 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:51:40.039901 kubelet[1746]: W0715 11:51:40.039879 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://139.178.70.107:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 139.178.70.107:6443: connect: connection refused Jul 15 11:51:40.039976 kubelet[1746]: E0715 11:51:40.039964 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://139.178.70.107:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:40.039000 audit[1772]: NETFILTER_CFG table=mangle:32 family=10 entries=1 op=nft_register_chain pid=1772 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:40.039000 audit[1772]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe7ad11de0 a2=0 a3=7ffe7ad11dcc items=0 ppid=1746 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:40.039000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:51:40.041929 systemd[1]: Created slice kubepods.slice. Jul 15 11:51:40.040000 audit[1771]: NETFILTER_CFG table=mangle:33 family=2 entries=1 op=nft_register_chain pid=1771 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:40.040000 audit[1771]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc7877fdf0 a2=0 a3=7ffc7877fddc items=0 ppid=1746 pid=1771 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:40.040000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:51:40.041000 audit[1774]: NETFILTER_CFG table=nat:34 family=2 entries=1 op=nft_register_chain pid=1774 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:40.041000 audit[1774]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe04fff4e0 a2=0 a3=7ffe04fff4cc items=0 ppid=1746 pid=1774 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:40.041000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:51:40.042000 audit[1775]: NETFILTER_CFG table=nat:35 family=10 entries=2 op=nft_register_chain pid=1775 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:40.042000 audit[1775]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7fffbf397970 a2=0 a3=7fffbf39795c items=0 ppid=1746 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:40.042000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:51:40.045288 systemd[1]: Created slice kubepods-burstable.slice. Jul 15 11:51:40.044000 audit[1776]: NETFILTER_CFG table=filter:36 family=10 entries=2 op=nft_register_chain pid=1776 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:40.044000 audit[1776]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fffdd60de40 a2=0 a3=7fffdd60de2c items=0 ppid=1746 pid=1776 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:40.044000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:51:40.047934 systemd[1]: Created slice kubepods-besteffort.slice. Jul 15 11:51:40.047000 audit[1777]: NETFILTER_CFG table=filter:37 family=2 entries=1 op=nft_register_chain pid=1777 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:40.047000 audit[1777]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fffd6ae55b0 a2=0 a3=7fffd6ae559c items=0 ppid=1746 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:40.047000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:51:40.052978 kubelet[1746]: I0715 11:51:40.052936 1746 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:51:40.053057 kubelet[1746]: I0715 11:51:40.053047 1746 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:51:40.053166 kubelet[1746]: I0715 11:51:40.053157 1746 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:51:40.053230 kubelet[1746]: I0715 11:51:40.053209 1746 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:51:40.051000 audit[1746]: AVC avc: denied { mac_admin } for pid=1746 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:40.051000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:51:40.051000 audit[1746]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e45170 a1=c000e4ba70 a2=c000e45140 a3=25 items=0 ppid=1 pid=1746 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:40.051000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:51:40.060821 kubelet[1746]: I0715 11:51:40.060801 1746 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:51:40.061533 kubelet[1746]: E0715 11:51:40.061524 1746 eviction_manager.go:285] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 15 11:51:40.144651 systemd[1]: Created slice kubepods-burstable-podd8152f67df3f0fee3021e29d616dd017.slice. Jul 15 11:51:40.154577 kubelet[1746]: I0715 11:51:40.154562 1746 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:51:40.155311 kubelet[1746]: E0715 11:51:40.155297 1746 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.107:6443/api/v1/nodes\": dial tcp 139.178.70.107:6443: connect: connection refused" node="localhost" Jul 15 11:51:40.156987 systemd[1]: Created slice kubepods-burstable-pod3f04709fe51ae4ab5abd58e8da771b74.slice. Jul 15 11:51:40.164061 systemd[1]: Created slice kubepods-burstable-podb35b56493416c25588cb530e37ffc065.slice. Jul 15 11:51:40.210542 kubelet[1746]: E0715 11:51:40.210510 1746 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.107:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.107:6443: connect: connection refused" interval="400ms" Jul 15 11:51:40.212635 kubelet[1746]: I0715 11:51:40.212619 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d8152f67df3f0fee3021e29d616dd017-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"d8152f67df3f0fee3021e29d616dd017\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:51:40.212680 kubelet[1746]: I0715 11:51:40.212639 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:51:40.212680 kubelet[1746]: I0715 11:51:40.212650 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:51:40.212718 kubelet[1746]: I0715 11:51:40.212694 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:51:40.212718 kubelet[1746]: I0715 11:51:40.212704 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d8152f67df3f0fee3021e29d616dd017-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"d8152f67df3f0fee3021e29d616dd017\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:51:40.212718 kubelet[1746]: I0715 11:51:40.212712 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d8152f67df3f0fee3021e29d616dd017-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"d8152f67df3f0fee3021e29d616dd017\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:51:40.212774 kubelet[1746]: I0715 11:51:40.212735 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:51:40.212795 kubelet[1746]: I0715 11:51:40.212775 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:51:40.212795 kubelet[1746]: I0715 11:51:40.212787 1746 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:51:40.357300 kubelet[1746]: I0715 11:51:40.357232 1746 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:51:40.358128 kubelet[1746]: E0715 11:51:40.358103 1746 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.107:6443/api/v1/nodes\": dial tcp 139.178.70.107:6443: connect: connection refused" node="localhost" Jul 15 11:51:40.456550 env[1245]: time="2025-07-15T11:51:40.456511108Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:d8152f67df3f0fee3021e29d616dd017,Namespace:kube-system,Attempt:0,}" Jul 15 11:51:40.463742 env[1245]: time="2025-07-15T11:51:40.463646532Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,}" Jul 15 11:51:40.466289 env[1245]: time="2025-07-15T11:51:40.466228042Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,}" Jul 15 11:51:40.611361 kubelet[1746]: E0715 11:51:40.611288 1746 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.107:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.107:6443: connect: connection refused" interval="800ms" Jul 15 11:51:40.759040 kubelet[1746]: I0715 11:51:40.759018 1746 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:51:40.759240 kubelet[1746]: E0715 11:51:40.759220 1746 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.107:6443/api/v1/nodes\": dial tcp 139.178.70.107:6443: connect: connection refused" node="localhost" Jul 15 11:51:40.993987 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1363652990.mount: Deactivated successfully. Jul 15 11:51:41.011576 env[1245]: time="2025-07-15T11:51:41.011524565Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.012401 env[1245]: time="2025-07-15T11:51:41.012363101Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.020007 env[1245]: time="2025-07-15T11:51:41.019993300Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.021184 env[1245]: time="2025-07-15T11:51:41.021165976Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.024466 env[1245]: time="2025-07-15T11:51:41.024454173Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.026813 env[1245]: time="2025-07-15T11:51:41.026796780Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.028597 env[1245]: time="2025-07-15T11:51:41.028585578Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.030829 env[1245]: time="2025-07-15T11:51:41.030811753Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.035911 env[1245]: time="2025-07-15T11:51:41.035893872Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.038899 env[1245]: time="2025-07-15T11:51:41.038885948Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.043333 env[1245]: time="2025-07-15T11:51:41.043312779Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.051370 env[1245]: time="2025-07-15T11:51:41.051350948Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:41.087590 env[1245]: time="2025-07-15T11:51:41.087550562Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:51:41.087682 env[1245]: time="2025-07-15T11:51:41.087593118Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:51:41.087682 env[1245]: time="2025-07-15T11:51:41.087620438Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:51:41.087797 env[1245]: time="2025-07-15T11:51:41.087771852Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/99a364054b5c2080228a3b1f7533bcee09698b5577efac3c5053b0a71ef56bd3 pid=1787 runtime=io.containerd.runc.v2 Jul 15 11:51:41.097650 kubelet[1746]: W0715 11:51:41.096195 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://139.178.70.107:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 139.178.70.107:6443: connect: connection refused Jul 15 11:51:41.097650 kubelet[1746]: E0715 11:51:41.096232 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://139.178.70.107:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:41.102859 env[1245]: time="2025-07-15T11:51:41.102168963Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:51:41.102859 env[1245]: time="2025-07-15T11:51:41.102194643Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:51:41.102859 env[1245]: time="2025-07-15T11:51:41.102205871Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:51:41.102859 env[1245]: time="2025-07-15T11:51:41.102288192Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7ab4dc1fc97bdd4f9c7dcb867602652a61bd2bd1bd22a7ea44b338ecccec169f pid=1812 runtime=io.containerd.runc.v2 Jul 15 11:51:41.103180 systemd[1]: Started cri-containerd-99a364054b5c2080228a3b1f7533bcee09698b5577efac3c5053b0a71ef56bd3.scope. Jul 15 11:51:41.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.117000 audit: BPF prog-id=58 op=LOAD Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit[1796]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1787 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939613336343035346235633230383032323861336231663735333362 Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit[1796]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1787 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939613336343035346235633230383032323861336231663735333362 Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.118000 audit: BPF prog-id=59 op=LOAD Jul 15 11:51:41.118000 audit[1796]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003bc0d0 items=0 ppid=1787 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.118000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939613336343035346235633230383032323861336231663735333362 Jul 15 11:51:41.119000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.119000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.119000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.119000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.119000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.119000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.119000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.119000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.119000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.119000 audit: BPF prog-id=60 op=LOAD Jul 15 11:51:41.119000 audit[1796]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003bc118 items=0 ppid=1787 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.119000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939613336343035346235633230383032323861336231663735333362 Jul 15 11:51:41.122000 audit: BPF prog-id=60 op=UNLOAD Jul 15 11:51:41.122000 audit: BPF prog-id=59 op=UNLOAD Jul 15 11:51:41.122000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.122000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.122000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.122000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.122000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.122000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.122000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.122000 audit[1796]: AVC avc: denied { perfmon } for pid=1796 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.122000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.122000 audit[1796]: AVC avc: denied { bpf } for pid=1796 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.122000 audit: BPF prog-id=61 op=LOAD Jul 15 11:51:41.122000 audit[1796]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003bc528 items=0 ppid=1787 pid=1796 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3939613336343035346235633230383032323861336231663735333362 Jul 15 11:51:41.127022 env[1245]: time="2025-07-15T11:51:41.126723600Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:51:41.127022 env[1245]: time="2025-07-15T11:51:41.126759278Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:51:41.127022 env[1245]: time="2025-07-15T11:51:41.126787662Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:51:41.127022 env[1245]: time="2025-07-15T11:51:41.126903434Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/0484e9e7eeeb3a1380931355efbe852caad27ef8b625add30e5e966d4487b41d pid=1839 runtime=io.containerd.runc.v2 Jul 15 11:51:41.128151 systemd[1]: Started cri-containerd-7ab4dc1fc97bdd4f9c7dcb867602652a61bd2bd1bd22a7ea44b338ecccec169f.scope. Jul 15 11:51:41.151278 systemd[1]: Started cri-containerd-0484e9e7eeeb3a1380931355efbe852caad27ef8b625add30e5e966d4487b41d.scope. Jul 15 11:51:41.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.154000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.154000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.154000 audit: BPF prog-id=62 op=LOAD Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1812 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761623464633166633937626464346639633764636238363736303236 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1812 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761623464633166633937626464346639633764636238363736303236 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit: BPF prog-id=63 op=LOAD Jul 15 11:51:41.155000 audit[1823]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000025130 items=0 ppid=1812 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761623464633166633937626464346639633764636238363736303236 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit: BPF prog-id=64 op=LOAD Jul 15 11:51:41.155000 audit[1823]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000025178 items=0 ppid=1812 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761623464633166633937626464346639633764636238363736303236 Jul 15 11:51:41.155000 audit: BPF prog-id=64 op=UNLOAD Jul 15 11:51:41.155000 audit: BPF prog-id=63 op=UNLOAD Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { perfmon } for pid=1823 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit[1823]: AVC avc: denied { bpf } for pid=1823 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.155000 audit: BPF prog-id=65 op=LOAD Jul 15 11:51:41.155000 audit[1823]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000025588 items=0 ppid=1812 pid=1823 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.155000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761623464633166633937626464346639633764636238363736303236 Jul 15 11:51:41.165710 env[1245]: time="2025-07-15T11:51:41.165682861Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:d8152f67df3f0fee3021e29d616dd017,Namespace:kube-system,Attempt:0,} returns sandbox id \"99a364054b5c2080228a3b1f7533bcee09698b5577efac3c5053b0a71ef56bd3\"" Jul 15 11:51:41.167521 env[1245]: time="2025-07-15T11:51:41.167488694Z" level=info msg="CreateContainer within sandbox \"99a364054b5c2080228a3b1f7533bcee09698b5577efac3c5053b0a71ef56bd3\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 15 11:51:41.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.175000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.175000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.175000 audit: BPF prog-id=66 op=LOAD Jul 15 11:51:41.175000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.175000 audit[1856]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1839 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.175000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034383465396537656565623361313338303933313335356566626538 Jul 15 11:51:41.176000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.176000 audit[1856]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1839 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034383465396537656565623361313338303933313335356566626538 Jul 15 11:51:41.176000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.176000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.176000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.176000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.176000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.176000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.176000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.176000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.176000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.176000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.176000 audit: BPF prog-id=67 op=LOAD Jul 15 11:51:41.176000 audit[1856]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a0ce0 items=0 ppid=1839 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.176000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034383465396537656565623361313338303933313335356566626538 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit: BPF prog-id=68 op=LOAD Jul 15 11:51:41.177000 audit[1856]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a0d28 items=0 ppid=1839 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034383465396537656565623361313338303933313335356566626538 Jul 15 11:51:41.177000 audit: BPF prog-id=68 op=UNLOAD Jul 15 11:51:41.177000 audit: BPF prog-id=67 op=UNLOAD Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { perfmon } for pid=1856 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit[1856]: AVC avc: denied { bpf } for pid=1856 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.177000 audit: BPF prog-id=69 op=LOAD Jul 15 11:51:41.177000 audit[1856]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a1138 items=0 ppid=1839 pid=1856 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.177000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3034383465396537656565623361313338303933313335356566626538 Jul 15 11:51:41.186050 env[1245]: time="2025-07-15T11:51:41.186020864Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:3f04709fe51ae4ab5abd58e8da771b74,Namespace:kube-system,Attempt:0,} returns sandbox id \"7ab4dc1fc97bdd4f9c7dcb867602652a61bd2bd1bd22a7ea44b338ecccec169f\"" Jul 15 11:51:41.187282 env[1245]: time="2025-07-15T11:51:41.187262068Z" level=info msg="CreateContainer within sandbox \"7ab4dc1fc97bdd4f9c7dcb867602652a61bd2bd1bd22a7ea44b338ecccec169f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 15 11:51:41.209923 env[1245]: time="2025-07-15T11:51:41.209897898Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:b35b56493416c25588cb530e37ffc065,Namespace:kube-system,Attempt:0,} returns sandbox id \"0484e9e7eeeb3a1380931355efbe852caad27ef8b625add30e5e966d4487b41d\"" Jul 15 11:51:41.211168 env[1245]: time="2025-07-15T11:51:41.211144214Z" level=info msg="CreateContainer within sandbox \"0484e9e7eeeb3a1380931355efbe852caad27ef8b625add30e5e966d4487b41d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 15 11:51:41.217947 kubelet[1746]: W0715 11:51:41.217863 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://139.178.70.107:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 139.178.70.107:6443: connect: connection refused Jul 15 11:51:41.217947 kubelet[1746]: E0715 11:51:41.217913 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://139.178.70.107:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:41.225855 env[1245]: time="2025-07-15T11:51:41.225822854Z" level=info msg="CreateContainer within sandbox \"99a364054b5c2080228a3b1f7533bcee09698b5577efac3c5053b0a71ef56bd3\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"9d53bb75781c67555d7076a59499bbf9e592f4c0cec1cf608dd89ed35f29fc07\"" Jul 15 11:51:41.226325 env[1245]: time="2025-07-15T11:51:41.226306940Z" level=info msg="StartContainer for \"9d53bb75781c67555d7076a59499bbf9e592f4c0cec1cf608dd89ed35f29fc07\"" Jul 15 11:51:41.229288 env[1245]: time="2025-07-15T11:51:41.229261015Z" level=info msg="CreateContainer within sandbox \"7ab4dc1fc97bdd4f9c7dcb867602652a61bd2bd1bd22a7ea44b338ecccec169f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d\"" Jul 15 11:51:41.229648 env[1245]: time="2025-07-15T11:51:41.229631139Z" level=info msg="StartContainer for \"287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d\"" Jul 15 11:51:41.245661 systemd[1]: Started cri-containerd-9d53bb75781c67555d7076a59499bbf9e592f4c0cec1cf608dd89ed35f29fc07.scope. Jul 15 11:51:41.254631 env[1245]: time="2025-07-15T11:51:41.254548441Z" level=info msg="CreateContainer within sandbox \"0484e9e7eeeb3a1380931355efbe852caad27ef8b625add30e5e966d4487b41d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c\"" Jul 15 11:51:41.257242 systemd[1]: Started cri-containerd-287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d.scope. Jul 15 11:51:41.258454 env[1245]: time="2025-07-15T11:51:41.257249624Z" level=info msg="StartContainer for \"41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c\"" Jul 15 11:51:41.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.260000 audit: BPF prog-id=70 op=LOAD Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1787 pid=1921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964353362623735373831633637353535643730373661353934393962 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1787 pid=1921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964353362623735373831633637353535643730373661353934393962 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit: BPF prog-id=71 op=LOAD Jul 15 11:51:41.261000 audit[1921]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c00022b530 items=0 ppid=1787 pid=1921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964353362623735373831633637353535643730373661353934393962 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit: BPF prog-id=72 op=LOAD Jul 15 11:51:41.261000 audit[1921]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c00022b578 items=0 ppid=1787 pid=1921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964353362623735373831633637353535643730373661353934393962 Jul 15 11:51:41.261000 audit: BPF prog-id=72 op=UNLOAD Jul 15 11:51:41.261000 audit: BPF prog-id=71 op=UNLOAD Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { perfmon } for pid=1921 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit[1921]: AVC avc: denied { bpf } for pid=1921 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.261000 audit: BPF prog-id=73 op=LOAD Jul 15 11:51:41.261000 audit[1921]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c00022b988 items=0 ppid=1787 pid=1921 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3964353362623735373831633637353535643730373661353934393962 Jul 15 11:51:41.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit: BPF prog-id=74 op=LOAD Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1812 pid=1922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238376632353835356235363463623130626262373765356161363166 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1812 pid=1922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238376632353835356235363463623130626262373765356161363166 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit: BPF prog-id=75 op=LOAD Jul 15 11:51:41.274000 audit[1922]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00030cc40 items=0 ppid=1812 pid=1922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238376632353835356235363463623130626262373765356161363166 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.274000 audit: BPF prog-id=76 op=LOAD Jul 15 11:51:41.274000 audit[1922]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00030cc88 items=0 ppid=1812 pid=1922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.274000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238376632353835356235363463623130626262373765356161363166 Jul 15 11:51:41.275000 audit: BPF prog-id=76 op=UNLOAD Jul 15 11:51:41.275000 audit: BPF prog-id=75 op=UNLOAD Jul 15 11:51:41.275000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.275000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.275000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.275000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.275000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.275000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.275000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.275000 audit[1922]: AVC avc: denied { perfmon } for pid=1922 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.275000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.275000 audit[1922]: AVC avc: denied { bpf } for pid=1922 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.275000 audit: BPF prog-id=77 op=LOAD Jul 15 11:51:41.275000 audit[1922]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030d098 items=0 ppid=1812 pid=1922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3238376632353835356235363463623130626262373765356161363166 Jul 15 11:51:41.279515 systemd[1]: Started cri-containerd-41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c.scope. Jul 15 11:51:41.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit: BPF prog-id=78 op=LOAD Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1955]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1839 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431666163623839383065313038643936613266356363383764623435 Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1955]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1839 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431666163623839383065313038643936613266356363383764623435 Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.287000 audit: BPF prog-id=79 op=LOAD Jul 15 11:51:41.287000 audit[1955]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000213660 items=0 ppid=1839 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.287000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431666163623839383065313038643936613266356363383764623435 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit: BPF prog-id=80 op=LOAD Jul 15 11:51:41.288000 audit[1955]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002136a8 items=0 ppid=1839 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431666163623839383065313038643936613266356363383764623435 Jul 15 11:51:41.288000 audit: BPF prog-id=80 op=UNLOAD Jul 15 11:51:41.288000 audit: BPF prog-id=79 op=UNLOAD Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { perfmon } for pid=1955 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit[1955]: AVC avc: denied { bpf } for pid=1955 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:41.288000 audit: BPF prog-id=81 op=LOAD Jul 15 11:51:41.288000 audit[1955]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000213ab8 items=0 ppid=1839 pid=1955 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:41.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3431666163623839383065313038643936613266356363383764623435 Jul 15 11:51:41.305563 env[1245]: time="2025-07-15T11:51:41.305536856Z" level=info msg="StartContainer for \"9d53bb75781c67555d7076a59499bbf9e592f4c0cec1cf608dd89ed35f29fc07\" returns successfully" Jul 15 11:51:41.318957 env[1245]: time="2025-07-15T11:51:41.318934191Z" level=info msg="StartContainer for \"287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d\" returns successfully" Jul 15 11:51:41.323289 env[1245]: time="2025-07-15T11:51:41.323270498Z" level=info msg="StartContainer for \"41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c\" returns successfully" Jul 15 11:51:41.412098 kubelet[1746]: E0715 11:51:41.412066 1746 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.107:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.107:6443: connect: connection refused" interval="1.6s" Jul 15 11:51:41.560590 kubelet[1746]: I0715 11:51:41.560529 1746 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:51:41.560742 kubelet[1746]: E0715 11:51:41.560727 1746 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.107:6443/api/v1/nodes\": dial tcp 139.178.70.107:6443: connect: connection refused" node="localhost" Jul 15 11:51:41.572098 kubelet[1746]: W0715 11:51:41.572062 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://139.178.70.107:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 139.178.70.107:6443: connect: connection refused Jul 15 11:51:41.572173 kubelet[1746]: E0715 11:51:41.572104 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://139.178.70.107:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:41.625929 kubelet[1746]: W0715 11:51:41.625890 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.RuntimeClass: Get "https://139.178.70.107:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0": dial tcp 139.178.70.107:6443: connect: connection refused Jul 15 11:51:41.625929 kubelet[1746]: E0715 11:51:41.625932 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.RuntimeClass: failed to list *v1.RuntimeClass: Get \"https://139.178.70.107:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:41.863461 kubelet[1746]: E0715 11:51:41.863391 1746 certificate_manager.go:562] "Unhandled Error" err="kubernetes.io/kube-apiserver-client-kubelet: Failed while requesting a signed certificate from the control plane: cannot create certificate signing request: Post \"https://139.178.70.107:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:42.851339 kubelet[1746]: W0715 11:51:42.851297 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Service: Get "https://139.178.70.107:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0": dial tcp 139.178.70.107:6443: connect: connection refused Jul 15 11:51:42.851339 kubelet[1746]: E0715 11:51:42.851342 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Service: failed to list *v1.Service: Get \"https://139.178.70.107:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:42.971000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:42.971000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00062e000 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:51:42.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:51:42.971000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:42.971000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0000ac3e0 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:51:42.971000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:51:43.012978 kubelet[1746]: E0715 11:51:43.012896 1746 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.107:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.107:6443: connect: connection refused" interval="3.2s" Jul 15 11:51:43.153175 kubelet[1746]: W0715 11:51:43.153094 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.Node: Get "https://139.178.70.107:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0": dial tcp 139.178.70.107:6443: connect: connection refused Jul 15 11:51:43.153175 kubelet[1746]: E0715 11:51:43.153147 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.Node: failed to list *v1.Node: Get \"https://139.178.70.107:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:43.162131 kubelet[1746]: I0715 11:51:43.162114 1746 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:51:43.162483 kubelet[1746]: E0715 11:51:43.162469 1746 kubelet_node_status.go:95] "Unable to register node with API server" err="Post \"https://139.178.70.107:6443/api/v1/nodes\": dial tcp 139.178.70.107:6443: connect: connection refused" node="localhost" Jul 15 11:51:43.162612 kubelet[1746]: E0715 11:51:43.162545 1746 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.107:6443/api/v1/namespaces/default/events\": dial tcp 139.178.70.107:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18526a7f4a197a5e default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:51:39.937118814 +0000 UTC m=+0.830548936,LastTimestamp:2025-07-15 11:51:39.937118814 +0000 UTC m=+0.830548936,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:51:43.737123 kubelet[1746]: W0715 11:51:43.737095 1746 reflector.go:561] k8s.io/client-go/informers/factory.go:160: failed to list *v1.CSIDriver: Get "https://139.178.70.107:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0": dial tcp 139.178.70.107:6443: connect: connection refused Jul 15 11:51:43.737231 kubelet[1746]: E0715 11:51:43.737127 1746 reflector.go:158] "Unhandled Error" err="k8s.io/client-go/informers/factory.go:160: Failed to watch *v1.CSIDriver: failed to list *v1.CSIDriver: Get \"https://139.178.70.107:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.107:6443: connect: connection refused" logger="UnhandledError" Jul 15 11:51:45.066000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:45.071216 kernel: kauditd_printk_skb: 387 callbacks suppressed Jul 15 11:51:45.071262 kernel: audit: type=1400 audit(1752580305.066:564): avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:45.071282 kernel: audit: type=1300 audit(1752580305.066:564): arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0069ec930 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:51:45.066000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=41 a1=c0069ec930 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:51:45.066000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:51:45.078426 kernel: audit: type=1327 audit(1752580305.066:564): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:51:45.078471 kernel: audit: type=1400 audit(1752580305.070:565): avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:45.070000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:45.070000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c00406ecf0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:51:45.085371 kernel: audit: type=1300 audit(1752580305.070:565): arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c00406ecf0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:51:45.085408 kernel: audit: type=1327 audit(1752580305.070:565): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:51:45.070000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:51:45.070000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:45.091676 kernel: audit: type=1400 audit(1752580305.070:566): avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:45.091714 kernel: audit: type=1300 audit(1752580305.070:566): arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c003e57f60 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:51:45.070000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c003e57f60 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:51:45.070000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:51:45.084000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:45.106220 kernel: audit: type=1327 audit(1752580305.070:566): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:51:45.106276 kernel: audit: type=1400 audit(1752580305.084:567): avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:45.084000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c0031ae360 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:51:45.084000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:51:45.084000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:45.084000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c00406f8c0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:51:45.084000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:51:45.085000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:45.085000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=4a a1=c0069ecae0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:51:45.085000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:51:45.505835 kubelet[1746]: E0715 11:51:45.505813 1746 csi_plugin.go:305] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "localhost" not found Jul 15 11:51:45.850751 kubelet[1746]: E0715 11:51:45.850671 1746 csi_plugin.go:305] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "localhost" not found Jul 15 11:51:46.218408 kubelet[1746]: E0715 11:51:46.218372 1746 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 15 11:51:46.273333 kubelet[1746]: E0715 11:51:46.273312 1746 csi_plugin.go:305] Failed to initialize CSINode: error updating CSINode annotation: timed out waiting for the condition; caused by: nodes "localhost" not found Jul 15 11:51:46.363839 kubelet[1746]: I0715 11:51:46.363820 1746 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:51:46.397478 kubelet[1746]: I0715 11:51:46.397459 1746 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 15 11:51:46.397611 kubelet[1746]: E0715 11:51:46.397600 1746 kubelet_node_status.go:535] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 15 11:51:46.411353 kubelet[1746]: E0715 11:51:46.411334 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:46.512097 kubelet[1746]: E0715 11:51:46.512028 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:46.612796 kubelet[1746]: E0715 11:51:46.612769 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:46.713507 kubelet[1746]: E0715 11:51:46.713482 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:46.814209 kubelet[1746]: E0715 11:51:46.814097 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:46.914386 kubelet[1746]: E0715 11:51:46.914356 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:47.015092 kubelet[1746]: E0715 11:51:47.015071 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:47.115689 kubelet[1746]: E0715 11:51:47.115622 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:47.216473 kubelet[1746]: E0715 11:51:47.216431 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:47.317214 kubelet[1746]: E0715 11:51:47.317180 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:47.378048 systemd[1]: Reloading. Jul 15 11:51:47.418415 kubelet[1746]: E0715 11:51:47.418395 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:47.444034 /usr/lib/systemd/system-generators/torcx-generator[2037]: time="2025-07-15T11:51:47Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:51:47.446133 /usr/lib/systemd/system-generators/torcx-generator[2037]: time="2025-07-15T11:51:47Z" level=info msg="torcx already run" Jul 15 11:51:47.509181 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:51:47.509335 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:51:47.519050 kubelet[1746]: E0715 11:51:47.519022 1746 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:47.522842 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:51:47.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.573000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.573000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.573000 audit: BPF prog-id=82 op=LOAD Jul 15 11:51:47.573000 audit: BPF prog-id=43 op=UNLOAD Jul 15 11:51:47.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.574000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.574000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit: BPF prog-id=83 op=LOAD Jul 15 11:51:47.575000 audit: BPF prog-id=70 op=UNLOAD Jul 15 11:51:47.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.575000 audit: BPF prog-id=84 op=LOAD Jul 15 11:51:47.575000 audit: BPF prog-id=78 op=UNLOAD Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit: BPF prog-id=85 op=LOAD Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.576000 audit: BPF prog-id=86 op=LOAD Jul 15 11:51:47.576000 audit: BPF prog-id=44 op=UNLOAD Jul 15 11:51:47.576000 audit: BPF prog-id=45 op=UNLOAD Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.577000 audit: BPF prog-id=87 op=LOAD Jul 15 11:51:47.577000 audit: BPF prog-id=46 op=UNLOAD Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.577000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit: BPF prog-id=88 op=LOAD Jul 15 11:51:47.578000 audit: BPF prog-id=47 op=UNLOAD Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit: BPF prog-id=89 op=LOAD Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.579000 audit: BPF prog-id=90 op=LOAD Jul 15 11:51:47.579000 audit: BPF prog-id=48 op=UNLOAD Jul 15 11:51:47.579000 audit: BPF prog-id=49 op=UNLOAD Jul 15 11:51:47.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.579000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.579000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.580000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.580000 audit: BPF prog-id=91 op=LOAD Jul 15 11:51:47.580000 audit: BPF prog-id=50 op=UNLOAD Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit: BPF prog-id=92 op=LOAD Jul 15 11:51:47.581000 audit: BPF prog-id=51 op=UNLOAD Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.581000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.582000 audit: BPF prog-id=93 op=LOAD Jul 15 11:51:47.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.582000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.582000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.582000 audit: BPF prog-id=94 op=LOAD Jul 15 11:51:47.582000 audit: BPF prog-id=52 op=UNLOAD Jul 15 11:51:47.582000 audit: BPF prog-id=53 op=UNLOAD Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.583000 audit: BPF prog-id=95 op=LOAD Jul 15 11:51:47.583000 audit: BPF prog-id=74 op=UNLOAD Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.583000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.584000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.584000 audit: BPF prog-id=96 op=LOAD Jul 15 11:51:47.584000 audit: BPF prog-id=62 op=UNLOAD Jul 15 11:51:47.584000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.585000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.585000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.585000 audit: BPF prog-id=97 op=LOAD Jul 15 11:51:47.585000 audit: BPF prog-id=54 op=UNLOAD Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit: BPF prog-id=98 op=LOAD Jul 15 11:51:47.586000 audit: BPF prog-id=55 op=UNLOAD Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.586000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.587000 audit: BPF prog-id=99 op=LOAD Jul 15 11:51:47.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.587000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.587000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.587000 audit: BPF prog-id=100 op=LOAD Jul 15 11:51:47.587000 audit: BPF prog-id=56 op=UNLOAD Jul 15 11:51:47.587000 audit: BPF prog-id=57 op=UNLOAD Jul 15 11:51:47.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.588000 audit: BPF prog-id=101 op=LOAD Jul 15 11:51:47.588000 audit: BPF prog-id=58 op=UNLOAD Jul 15 11:51:47.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.589000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.589000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:47.589000 audit: BPF prog-id=102 op=LOAD Jul 15 11:51:47.589000 audit: BPF prog-id=66 op=UNLOAD Jul 15 11:51:47.602297 systemd[1]: Stopping kubelet.service... Jul 15 11:51:47.623773 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:51:47.623900 systemd[1]: Stopped kubelet.service. Jul 15 11:51:47.622000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:47.627199 systemd[1]: Starting kubelet.service... Jul 15 11:51:47.711000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:47.711000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000b9d1e0 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:51:47.712000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:47.712000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000b9d200 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:51:47.712000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:51:47.711000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:51:47.712000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:47.712000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000b9d3a0 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:51:47.712000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:51:47.713000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:51:47.713000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000a8f940 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:51:47.713000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:51:49.194000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:51:49.194000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000c2aac0 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:51:49.194000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:51:50.637000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:50.638336 systemd[1]: Started kubelet.service. Jul 15 11:51:50.642003 kernel: kauditd_printk_skb: 268 callbacks suppressed Jul 15 11:51:50.642100 kernel: audit: type=1130 audit(1752580310.637:820): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:51:50.721071 kubelet[2102]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:51:50.721349 kubelet[2102]: Flag --pod-infra-container-image has been deprecated, will be removed in a future release. Image garbage collector will get sandbox image information from CRI. Jul 15 11:51:50.721394 kubelet[2102]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:51:50.721588 kubelet[2102]: I0715 11:51:50.721570 2102 server.go:211] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:51:50.726948 kubelet[2102]: I0715 11:51:50.726923 2102 server.go:491] "Kubelet version" kubeletVersion="v1.31.8" Jul 15 11:51:50.726948 kubelet[2102]: I0715 11:51:50.726943 2102 server.go:493] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:51:50.727098 kubelet[2102]: I0715 11:51:50.727085 2102 server.go:934] "Client rotation is on, will bootstrap in background" Jul 15 11:51:50.728222 kubelet[2102]: I0715 11:51:50.728207 2102 certificate_store.go:130] Loading cert/key pair from "/var/lib/kubelet/pki/kubelet-client-current.pem". Jul 15 11:51:50.729453 kubelet[2102]: I0715 11:51:50.729427 2102 dynamic_cafile_content.go:160] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:51:50.731979 kubelet[2102]: E0715 11:51:50.731934 2102 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:51:50.732697 kubelet[2102]: I0715 11:51:50.732656 2102 server.go:1408] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:51:50.735430 kubelet[2102]: I0715 11:51:50.735349 2102 server.go:749] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:51:50.735430 kubelet[2102]: I0715 11:51:50.735428 2102 swap_util.go:113] "Swap is on" /proc/swaps contents="Filename\t\t\t\tType\t\tSize\t\tUsed\t\tPriority" Jul 15 11:51:50.736327 kubelet[2102]: I0715 11:51:50.736302 2102 container_manager_linux.go:264] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:51:50.736432 kubelet[2102]: I0715 11:51:50.736327 2102 container_manager_linux.go:269] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"ExperimentalMemoryManagerPolicy":"None","ExperimentalMemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:51:50.736511 kubelet[2102]: I0715 11:51:50.736435 2102 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:51:50.736511 kubelet[2102]: I0715 11:51:50.736458 2102 container_manager_linux.go:300] "Creating device plugin manager" Jul 15 11:51:50.736511 kubelet[2102]: I0715 11:51:50.736478 2102 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:51:50.736581 kubelet[2102]: I0715 11:51:50.736537 2102 kubelet.go:408] "Attempting to sync node with API server" Jul 15 11:51:50.736581 kubelet[2102]: I0715 11:51:50.736547 2102 kubelet.go:303] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:51:50.736581 kubelet[2102]: I0715 11:51:50.736565 2102 kubelet.go:314] "Adding apiserver pod source" Jul 15 11:51:50.736581 kubelet[2102]: I0715 11:51:50.736571 2102 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:51:50.744117 kubelet[2102]: I0715 11:51:50.744097 2102 kuberuntime_manager.go:262] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:51:50.744615 kubelet[2102]: I0715 11:51:50.744593 2102 kubelet.go:837] "Not starting ClusterTrustBundle informer because we are in static kubelet mode" Jul 15 11:51:50.745025 kubelet[2102]: I0715 11:51:50.745017 2102 server.go:1274] "Started kubelet" Jul 15 11:51:50.750998 kernel: audit: type=1400 audit(1752580310.745:821): avc: denied { mac_admin } for pid=2102 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:50.751081 kernel: audit: type=1401 audit(1752580310.745:821): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:51:50.745000 audit[2102]: AVC avc: denied { mac_admin } for pid=2102 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:50.745000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:51:50.754925 kernel: audit: type=1300 audit(1752580310.745:821): arch=c000003e syscall=188 success=no exit=-22 a0=c000a20390 a1=c000bd2828 a2=c000a20330 a3=25 items=0 ppid=1 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:50.745000 audit[2102]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a20390 a1=c000bd2828 a2=c000a20330 a3=25 items=0 ppid=1 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:50.755093 kubelet[2102]: I0715 11:51:50.755072 2102 kubelet.go:1430] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:51:50.755171 kubelet[2102]: I0715 11:51:50.755161 2102 kubelet.go:1434] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr /var/lib/kubelet/plugins: invalid argument" Jul 15 11:51:50.755235 kubelet[2102]: I0715 11:51:50.755227 2102 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:51:50.745000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:51:50.758685 kernel: audit: type=1327 audit(1752580310.745:821): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:51:50.763076 kernel: audit: type=1400 audit(1752580310.754:822): avc: denied { mac_admin } for pid=2102 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:50.754000 audit[2102]: AVC avc: denied { mac_admin } for pid=2102 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:50.763177 kubelet[2102]: I0715 11:51:50.759844 2102 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:51:50.763177 kubelet[2102]: I0715 11:51:50.761426 2102 volume_manager.go:289] "Starting Kubelet Volume Manager" Jul 15 11:51:50.763177 kubelet[2102]: E0715 11:51:50.761501 2102 kubelet_node_status.go:453] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:51:50.763177 kubelet[2102]: I0715 11:51:50.761713 2102 server.go:163] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:51:50.763177 kubelet[2102]: I0715 11:51:50.762084 2102 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:51:50.763177 kubelet[2102]: I0715 11:51:50.762225 2102 server.go:236] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:51:50.763177 kubelet[2102]: I0715 11:51:50.762537 2102 server.go:449] "Adding debug handlers to kubelet server" Jul 15 11:51:50.754000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:51:50.766336 kubelet[2102]: I0715 11:51:50.766322 2102 factory.go:219] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:51:50.766467 kernel: audit: type=1401 audit(1752580310.754:822): op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:51:50.754000 audit[2102]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000bd4aa0 a1=c000bd2840 a2=c000a20450 a3=25 items=0 ppid=1 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:50.772792 kernel: audit: type=1300 audit(1752580310.754:822): arch=c000003e syscall=188 success=no exit=-22 a0=c000bd4aa0 a1=c000bd2840 a2=c000a20450 a3=25 items=0 ppid=1 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:50.773242 kernel: audit: type=1327 audit(1752580310.754:822): proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:51:50.754000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:51:50.775509 kubelet[2102]: I0715 11:51:50.774134 2102 desired_state_of_world_populator.go:147] "Desired state populator starts to run" Jul 15 11:51:50.777431 kubelet[2102]: I0715 11:51:50.777423 2102 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:51:50.779131 kubelet[2102]: E0715 11:51:50.779111 2102 kubelet.go:1478] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:51:50.781835 kubelet[2102]: I0715 11:51:50.781809 2102 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv4" Jul 15 11:51:50.782910 kubelet[2102]: I0715 11:51:50.782894 2102 kubelet_network_linux.go:50] "Initialized iptables rules." protocol="IPv6" Jul 15 11:51:50.782995 kubelet[2102]: I0715 11:51:50.782987 2102 status_manager.go:217] "Starting to sync pod status with apiserver" Jul 15 11:51:50.783051 kubelet[2102]: I0715 11:51:50.783044 2102 kubelet.go:2321] "Starting kubelet main sync loop" Jul 15 11:51:50.783124 kubelet[2102]: E0715 11:51:50.783113 2102 kubelet.go:2345] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:51:50.789180 kubelet[2102]: I0715 11:51:50.789164 2102 factory.go:221] Registration of the containerd container factory successfully Jul 15 11:51:50.789309 kubelet[2102]: I0715 11:51:50.789284 2102 factory.go:221] Registration of the systemd container factory successfully Jul 15 11:51:50.830869 kubelet[2102]: I0715 11:51:50.830851 2102 cpu_manager.go:214] "Starting CPU manager" policy="none" Jul 15 11:51:50.831000 kubelet[2102]: I0715 11:51:50.830990 2102 cpu_manager.go:215] "Reconciling" reconcilePeriod="10s" Jul 15 11:51:50.831071 kubelet[2102]: I0715 11:51:50.831065 2102 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:51:50.831294 kubelet[2102]: I0715 11:51:50.831285 2102 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 15 11:51:50.831357 kubelet[2102]: I0715 11:51:50.831337 2102 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 15 11:51:50.831404 kubelet[2102]: I0715 11:51:50.831397 2102 policy_none.go:49] "None policy: Start" Jul 15 11:51:50.831959 kubelet[2102]: I0715 11:51:50.831932 2102 memory_manager.go:170] "Starting memorymanager" policy="None" Jul 15 11:51:50.832039 kubelet[2102]: I0715 11:51:50.832020 2102 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:51:50.832277 kubelet[2102]: I0715 11:51:50.832271 2102 state_mem.go:75] "Updated machine memory state" Jul 15 11:51:50.835533 kubelet[2102]: I0715 11:51:50.835517 2102 manager.go:513] "Failed to read data from checkpoint" checkpoint="kubelet_internal_checkpoint" err="checkpoint is not found" Jul 15 11:51:50.834000 audit[2102]: AVC avc: denied { mac_admin } for pid=2102 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:50.834000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:51:50.838490 kernel: audit: type=1400 audit(1752580310.834:823): avc: denied { mac_admin } for pid=2102 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:50.834000 audit[2102]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ceca50 a1=c0011bdf38 a2=c000ceca20 a3=25 items=0 ppid=1 pid=2102 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:50.834000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:51:50.841418 kubelet[2102]: I0715 11:51:50.840581 2102 server.go:88] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" path="/var/lib/kubelet/device-plugins/" err="setxattr /var/lib/kubelet/device-plugins/: invalid argument" Jul 15 11:51:50.841418 kubelet[2102]: I0715 11:51:50.840730 2102 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:51:50.841418 kubelet[2102]: I0715 11:51:50.840738 2102 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:51:50.841418 kubelet[2102]: I0715 11:51:50.840910 2102 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:51:50.942915 kubelet[2102]: I0715 11:51:50.942842 2102 kubelet_node_status.go:72] "Attempting to register node" node="localhost" Jul 15 11:51:50.949462 kubelet[2102]: I0715 11:51:50.949413 2102 kubelet_node_status.go:111] "Node was previously registered" node="localhost" Jul 15 11:51:50.949604 kubelet[2102]: I0715 11:51:50.949482 2102 kubelet_node_status.go:75] "Successfully registered node" node="localhost" Jul 15 11:51:50.978832 kubelet[2102]: I0715 11:51:50.978795 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:51:50.979058 kubelet[2102]: I0715 11:51:50.979041 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:51:50.979142 kubelet[2102]: I0715 11:51:50.979130 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/d8152f67df3f0fee3021e29d616dd017-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"d8152f67df3f0fee3021e29d616dd017\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:51:50.979214 kubelet[2102]: I0715 11:51:50.979203 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:51:50.979300 kubelet[2102]: I0715 11:51:50.979283 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:51:50.979377 kubelet[2102]: I0715 11:51:50.979364 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/3f04709fe51ae4ab5abd58e8da771b74-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"3f04709fe51ae4ab5abd58e8da771b74\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:51:50.979458 kubelet[2102]: I0715 11:51:50.979447 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/b35b56493416c25588cb530e37ffc065-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"b35b56493416c25588cb530e37ffc065\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:51:50.979529 kubelet[2102]: I0715 11:51:50.979518 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/d8152f67df3f0fee3021e29d616dd017-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"d8152f67df3f0fee3021e29d616dd017\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:51:50.979600 kubelet[2102]: I0715 11:51:50.979589 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/d8152f67df3f0fee3021e29d616dd017-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"d8152f67df3f0fee3021e29d616dd017\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:51:51.737249 kubelet[2102]: I0715 11:51:51.737224 2102 apiserver.go:52] "Watching apiserver" Jul 15 11:51:51.777122 kubelet[2102]: I0715 11:51:51.777101 2102 desired_state_of_world_populator.go:155] "Finished populating initial desired state of world" Jul 15 11:51:51.831804 kubelet[2102]: E0715 11:51:51.831780 2102 kubelet.go:1915] "Failed creating a mirror pod for" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:51:51.845561 kubelet[2102]: I0715 11:51:51.845512 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.84549571 podStartE2EDuration="1.84549571s" podCreationTimestamp="2025-07-15 11:51:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:51:51.840625143 +0000 UTC m=+1.173871154" watchObservedRunningTime="2025-07-15 11:51:51.84549571 +0000 UTC m=+1.178741716" Jul 15 11:51:51.850437 kubelet[2102]: I0715 11:51:51.850411 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.850396736 podStartE2EDuration="1.850396736s" podCreationTimestamp="2025-07-15 11:51:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:51:51.846152907 +0000 UTC m=+1.179398918" watchObservedRunningTime="2025-07-15 11:51:51.850396736 +0000 UTC m=+1.183642748" Jul 15 11:51:51.855510 kubelet[2102]: I0715 11:51:51.855478 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.855468093 podStartE2EDuration="1.855468093s" podCreationTimestamp="2025-07-15 11:51:50 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:51:51.850811158 +0000 UTC m=+1.184057169" watchObservedRunningTime="2025-07-15 11:51:51.855468093 +0000 UTC m=+1.188714101" Jul 15 11:51:52.281785 kubelet[2102]: I0715 11:51:52.281763 2102 kuberuntime_manager.go:1635] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 15 11:51:52.282107 env[1245]: time="2025-07-15T11:51:52.282055138Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 15 11:51:52.282381 kubelet[2102]: I0715 11:51:52.282360 2102 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 15 11:51:53.109995 systemd[1]: Created slice kubepods-besteffort-podc97fbb5f_52c4_4293_a40a_cce11c61c372.slice. Jul 15 11:51:53.191800 kubelet[2102]: I0715 11:51:53.191772 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/c97fbb5f-52c4-4293-a40a-cce11c61c372-xtables-lock\") pod \"kube-proxy-vfgvs\" (UID: \"c97fbb5f-52c4-4293-a40a-cce11c61c372\") " pod="kube-system/kube-proxy-vfgvs" Jul 15 11:51:53.192077 kubelet[2102]: I0715 11:51:53.192067 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/c97fbb5f-52c4-4293-a40a-cce11c61c372-kube-proxy\") pod \"kube-proxy-vfgvs\" (UID: \"c97fbb5f-52c4-4293-a40a-cce11c61c372\") " pod="kube-system/kube-proxy-vfgvs" Jul 15 11:51:53.192151 kubelet[2102]: I0715 11:51:53.192142 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/c97fbb5f-52c4-4293-a40a-cce11c61c372-lib-modules\") pod \"kube-proxy-vfgvs\" (UID: \"c97fbb5f-52c4-4293-a40a-cce11c61c372\") " pod="kube-system/kube-proxy-vfgvs" Jul 15 11:51:53.192226 kubelet[2102]: I0715 11:51:53.192197 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2txsm\" (UniqueName: \"kubernetes.io/projected/c97fbb5f-52c4-4293-a40a-cce11c61c372-kube-api-access-2txsm\") pod \"kube-proxy-vfgvs\" (UID: \"c97fbb5f-52c4-4293-a40a-cce11c61c372\") " pod="kube-system/kube-proxy-vfgvs" Jul 15 11:51:53.297820 kubelet[2102]: I0715 11:51:53.297799 2102 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 15 11:51:53.326730 systemd[1]: Created slice kubepods-besteffort-pod9349e0f0_43d0_4326_8e58_59ca9030df46.slice. Jul 15 11:51:53.393100 kubelet[2102]: I0715 11:51:53.393016 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/9349e0f0-43d0-4326-8e58-59ca9030df46-var-lib-calico\") pod \"tigera-operator-5bf8dfcb4-69jm2\" (UID: \"9349e0f0-43d0-4326-8e58-59ca9030df46\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-69jm2" Jul 15 11:51:53.393228 kubelet[2102]: I0715 11:51:53.393217 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-cp7k4\" (UniqueName: \"kubernetes.io/projected/9349e0f0-43d0-4326-8e58-59ca9030df46-kube-api-access-cp7k4\") pod \"tigera-operator-5bf8dfcb4-69jm2\" (UID: \"9349e0f0-43d0-4326-8e58-59ca9030df46\") " pod="tigera-operator/tigera-operator-5bf8dfcb4-69jm2" Jul 15 11:51:53.415125 env[1245]: time="2025-07-15T11:51:53.415088785Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-vfgvs,Uid:c97fbb5f-52c4-4293-a40a-cce11c61c372,Namespace:kube-system,Attempt:0,}" Jul 15 11:51:53.424410 env[1245]: time="2025-07-15T11:51:53.424373542Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:51:53.424516 env[1245]: time="2025-07-15T11:51:53.424397388Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:51:53.424516 env[1245]: time="2025-07-15T11:51:53.424412517Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:51:53.425021 env[1245]: time="2025-07-15T11:51:53.424534712Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/454d0324e187cd25abb8a8d6c01ce989431bf10420679b5ed608c7512efd9bc0 pid=2152 runtime=io.containerd.runc.v2 Jul 15 11:51:53.434371 systemd[1]: Started cri-containerd-454d0324e187cd25abb8a8d6c01ce989431bf10420679b5ed608c7512efd9bc0.scope. Jul 15 11:51:53.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit: BPF prog-id=103 op=LOAD Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2152 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435346430333234653138376364323561626238613864366330316365 Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2152 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435346430333234653138376364323561626238613864366330316365 Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.439000 audit: BPF prog-id=104 op=LOAD Jul 15 11:51:53.439000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c00034c6e0 items=0 ppid=2152 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435346430333234653138376364323561626238613864366330316365 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit: BPF prog-id=105 op=LOAD Jul 15 11:51:53.440000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c00034c728 items=0 ppid=2152 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435346430333234653138376364323561626238613864366330316365 Jul 15 11:51:53.440000 audit: BPF prog-id=105 op=UNLOAD Jul 15 11:51:53.440000 audit: BPF prog-id=104 op=UNLOAD Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { perfmon } for pid=2161 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit[2161]: AVC avc: denied { bpf } for pid=2161 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.440000 audit: BPF prog-id=106 op=LOAD Jul 15 11:51:53.440000 audit[2161]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c00034cb38 items=0 ppid=2152 pid=2161 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.440000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435346430333234653138376364323561626238613864366330316365 Jul 15 11:51:53.448436 env[1245]: time="2025-07-15T11:51:53.448412853Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-vfgvs,Uid:c97fbb5f-52c4-4293-a40a-cce11c61c372,Namespace:kube-system,Attempt:0,} returns sandbox id \"454d0324e187cd25abb8a8d6c01ce989431bf10420679b5ed608c7512efd9bc0\"" Jul 15 11:51:53.451512 env[1245]: time="2025-07-15T11:51:53.451492053Z" level=info msg="CreateContainer within sandbox \"454d0324e187cd25abb8a8d6c01ce989431bf10420679b5ed608c7512efd9bc0\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 15 11:51:53.458054 env[1245]: time="2025-07-15T11:51:53.458033026Z" level=info msg="CreateContainer within sandbox \"454d0324e187cd25abb8a8d6c01ce989431bf10420679b5ed608c7512efd9bc0\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"2cdd337bb1f4b62f4653872aa466d36a975839f0e84a0c0aa27de0c19557482a\"" Jul 15 11:51:53.459398 env[1245]: time="2025-07-15T11:51:53.458584333Z" level=info msg="StartContainer for \"2cdd337bb1f4b62f4653872aa466d36a975839f0e84a0c0aa27de0c19557482a\"" Jul 15 11:51:53.468185 systemd[1]: Started cri-containerd-2cdd337bb1f4b62f4653872aa466d36a975839f0e84a0c0aa27de0c19557482a.scope. Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001476b0 a2=3c a3=7f39a9a3e328 items=0 ppid=2152 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646433333762623166346236326634363533383732616134363664 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit: BPF prog-id=107 op=LOAD Jul 15 11:51:53.476000 audit[2194]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001479d8 a2=78 a3=c0001e1f98 items=0 ppid=2152 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646433333762623166346236326634363533383732616134363664 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit: BPF prog-id=108 op=LOAD Jul 15 11:51:53.476000 audit[2194]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000147770 a2=78 a3=c0001e1fe8 items=0 ppid=2152 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646433333762623166346236326634363533383732616134363664 Jul 15 11:51:53.476000 audit: BPF prog-id=108 op=UNLOAD Jul 15 11:51:53.476000 audit: BPF prog-id=107 op=UNLOAD Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { perfmon } for pid=2194 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit[2194]: AVC avc: denied { bpf } for pid=2194 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.476000 audit: BPF prog-id=109 op=LOAD Jul 15 11:51:53.476000 audit[2194]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000147c30 a2=78 a3=c0003d0078 items=0 ppid=2152 pid=2194 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.476000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3263646433333762623166346236326634363533383732616134363664 Jul 15 11:51:53.486589 env[1245]: time="2025-07-15T11:51:53.486525031Z" level=info msg="StartContainer for \"2cdd337bb1f4b62f4653872aa466d36a975839f0e84a0c0aa27de0c19557482a\" returns successfully" Jul 15 11:51:53.629621 env[1245]: time="2025-07-15T11:51:53.629596385Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-69jm2,Uid:9349e0f0-43d0-4326-8e58-59ca9030df46,Namespace:tigera-operator,Attempt:0,}" Jul 15 11:51:53.643756 env[1245]: time="2025-07-15T11:51:53.643676129Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:51:53.643756 env[1245]: time="2025-07-15T11:51:53.643698768Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:51:53.643857 env[1245]: time="2025-07-15T11:51:53.643715388Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:51:53.645983 env[1245]: time="2025-07-15T11:51:53.645948450Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ba2e4c8056de224260be7c24147a56744d85378334c91e8ce79f9c17428fe4d6 pid=2228 runtime=io.containerd.runc.v2 Jul 15 11:51:53.654760 systemd[1]: Started cri-containerd-ba2e4c8056de224260be7c24147a56744d85378334c91e8ce79f9c17428fe4d6.scope. Jul 15 11:51:53.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.673000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.673000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.673000 audit: BPF prog-id=110 op=LOAD Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit[2238]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2228 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261326534633830353664653232343236306265376332343134376135 Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit[2238]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=2228 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261326534633830353664653232343236306265376332343134376135 Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.674000 audit: BPF prog-id=111 op=LOAD Jul 15 11:51:53.674000 audit[2238]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0004103a0 items=0 ppid=2228 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.674000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261326534633830353664653232343236306265376332343134376135 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit: BPF prog-id=112 op=LOAD Jul 15 11:51:53.675000 audit[2238]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0004103e8 items=0 ppid=2228 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261326534633830353664653232343236306265376332343134376135 Jul 15 11:51:53.675000 audit: BPF prog-id=112 op=UNLOAD Jul 15 11:51:53.675000 audit: BPF prog-id=111 op=UNLOAD Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { perfmon } for pid=2238 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit[2238]: AVC avc: denied { bpf } for pid=2238 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:53.675000 audit: BPF prog-id=113 op=LOAD Jul 15 11:51:53.675000 audit[2238]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c0004107f8 items=0 ppid=2228 pid=2238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:53.675000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261326534633830353664653232343236306265376332343134376135 Jul 15 11:51:53.697292 env[1245]: time="2025-07-15T11:51:53.697260404Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-5bf8dfcb4-69jm2,Uid:9349e0f0-43d0-4326-8e58-59ca9030df46,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"ba2e4c8056de224260be7c24147a56744d85378334c91e8ce79f9c17428fe4d6\"" Jul 15 11:51:53.699310 env[1245]: time="2025-07-15T11:51:53.699288240Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 15 11:51:53.841111 kubelet[2102]: I0715 11:51:53.841079 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-vfgvs" podStartSLOduration=0.841067199 podStartE2EDuration="841.067199ms" podCreationTimestamp="2025-07-15 11:51:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:51:53.834949904 +0000 UTC m=+3.168195904" watchObservedRunningTime="2025-07-15 11:51:53.841067199 +0000 UTC m=+3.174313204" Jul 15 11:51:54.167000 audit[2294]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2294 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.167000 audit[2294]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe6ddc6100 a2=0 a3=7ffe6ddc60ec items=0 ppid=2205 pid=2294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.167000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:51:54.168000 audit[2295]: NETFILTER_CFG table=nat:39 family=2 entries=1 op=nft_register_chain pid=2295 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.168000 audit[2295]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffef9b5fd80 a2=0 a3=7ffef9b5fd6c items=0 ppid=2205 pid=2295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.168000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:51:54.168000 audit[2296]: NETFILTER_CFG table=filter:40 family=2 entries=1 op=nft_register_chain pid=2296 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.168000 audit[2296]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc39c7d6d0 a2=0 a3=7ffc39c7d6bc items=0 ppid=2205 pid=2296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.168000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:51:54.170000 audit[2297]: NETFILTER_CFG table=mangle:41 family=10 entries=1 op=nft_register_chain pid=2297 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.170000 audit[2297]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffccbc692e0 a2=0 a3=7ffccbc692cc items=0 ppid=2205 pid=2297 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.170000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:51:54.171000 audit[2298]: NETFILTER_CFG table=nat:42 family=10 entries=1 op=nft_register_chain pid=2298 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.171000 audit[2298]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd8abfa610 a2=0 a3=7ffd8abfa5fc items=0 ppid=2205 pid=2298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.171000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:51:54.172000 audit[2299]: NETFILTER_CFG table=filter:43 family=10 entries=1 op=nft_register_chain pid=2299 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.172000 audit[2299]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdf14c21d0 a2=0 a3=7ffdf14c21bc items=0 ppid=2205 pid=2299 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.172000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:51:54.286000 audit[2300]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2300 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.286000 audit[2300]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffc97ca06e0 a2=0 a3=7ffc97ca06cc items=0 ppid=2205 pid=2300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.286000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:51:54.289000 audit[2302]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2302 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.289000 audit[2302]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffe2f979610 a2=0 a3=7ffe2f9795fc items=0 ppid=2205 pid=2302 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.289000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 15 11:51:54.293000 audit[2305]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2305 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.293000 audit[2305]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffdc75e5e30 a2=0 a3=7ffdc75e5e1c items=0 ppid=2205 pid=2305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.293000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 15 11:51:54.294000 audit[2306]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2306 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.294000 audit[2306]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffccd10b090 a2=0 a3=7ffccd10b07c items=0 ppid=2205 pid=2306 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.294000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:51:54.295000 audit[2308]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2308 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.295000 audit[2308]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc3e5ab970 a2=0 a3=7ffc3e5ab95c items=0 ppid=2205 pid=2308 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.295000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:51:54.296000 audit[2309]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2309 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.296000 audit[2309]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff4fd907c0 a2=0 a3=7fff4fd907ac items=0 ppid=2205 pid=2309 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.296000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:51:54.298000 audit[2311]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2311 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.298000 audit[2311]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffe0c7b5930 a2=0 a3=7ffe0c7b591c items=0 ppid=2205 pid=2311 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.298000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:51:54.300000 audit[2314]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2314 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.300000 audit[2314]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc0f47cd00 a2=0 a3=7ffc0f47ccec items=0 ppid=2205 pid=2314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.300000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 15 11:51:54.301000 audit[2315]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2315 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.301000 audit[2315]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffce99eb8f0 a2=0 a3=7ffce99eb8dc items=0 ppid=2205 pid=2315 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.301000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:51:54.303000 audit[2317]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2317 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.303000 audit[2317]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffecc991c10 a2=0 a3=7ffecc991bfc items=0 ppid=2205 pid=2317 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.303000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:51:54.304000 audit[2318]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2318 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.304000 audit[2318]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff93089dc0 a2=0 a3=7fff93089dac items=0 ppid=2205 pid=2318 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.304000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:51:54.307000 audit[2320]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2320 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.307000 audit[2320]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd30d5dc00 a2=0 a3=7ffd30d5dbec items=0 ppid=2205 pid=2320 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.307000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:51:54.309000 audit[2323]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2323 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.309000 audit[2323]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe0ccc79c0 a2=0 a3=7ffe0ccc79ac items=0 ppid=2205 pid=2323 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.309000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:51:54.312000 audit[2326]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.312000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd475b2e10 a2=0 a3=7ffd475b2dfc items=0 ppid=2205 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.312000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:51:54.313000 audit[2327]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.313000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffff4146470 a2=0 a3=7ffff414645c items=0 ppid=2205 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.313000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:51:54.315000 audit[2329]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2329 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.315000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffe310ff230 a2=0 a3=7ffe310ff21c items=0 ppid=2205 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.315000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:51:54.318000 audit[2332]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2332 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.318000 audit[2332]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff00c43780 a2=0 a3=7fff00c4376c items=0 ppid=2205 pid=2332 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.318000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:51:54.319000 audit[2333]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2333 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.319000 audit[2333]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc1a452920 a2=0 a3=7ffc1a45290c items=0 ppid=2205 pid=2333 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.319000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:51:54.322000 audit[2335]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2335 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:51:54.322000 audit[2335]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7fff06a56cb0 a2=0 a3=7fff06a56c9c items=0 ppid=2205 pid=2335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.322000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:51:54.349000 audit[2341]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:51:54.349000 audit[2341]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffd28b8ffa0 a2=0 a3=7ffd28b8ff8c items=0 ppid=2205 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.349000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:51:54.357000 audit[2341]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2341 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:51:54.357000 audit[2341]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffd28b8ffa0 a2=0 a3=7ffd28b8ff8c items=0 ppid=2205 pid=2341 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.357000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:51:54.359000 audit[2346]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2346 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.359000 audit[2346]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffcc414e550 a2=0 a3=7ffcc414e53c items=0 ppid=2205 pid=2346 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.359000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:51:54.361000 audit[2348]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2348 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.361000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffd927df870 a2=0 a3=7ffd927df85c items=0 ppid=2205 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.361000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 15 11:51:54.364000 audit[2351]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2351 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.364000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffdbcb4cc80 a2=0 a3=7ffdbcb4cc6c items=0 ppid=2205 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.364000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 15 11:51:54.365000 audit[2352]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2352 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.365000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf37f83b0 a2=0 a3=7ffcf37f839c items=0 ppid=2205 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.365000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:51:54.367000 audit[2354]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.367000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffcba5161d0 a2=0 a3=7ffcba5161bc items=0 ppid=2205 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.367000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:51:54.368000 audit[2355]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2355 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.368000 audit[2355]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe811abe00 a2=0 a3=7ffe811abdec items=0 ppid=2205 pid=2355 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.368000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:51:54.369000 audit[2357]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.369000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffc3633d9f0 a2=0 a3=7ffc3633d9dc items=0 ppid=2205 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.369000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 15 11:51:54.372000 audit[2360]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2360 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.372000 audit[2360]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffd39b9c7a0 a2=0 a3=7ffd39b9c78c items=0 ppid=2205 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.372000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:51:54.373000 audit[2361]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2361 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.373000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffec8d6cc90 a2=0 a3=7ffec8d6cc7c items=0 ppid=2205 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.373000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:51:54.375000 audit[2363]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2363 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.375000 audit[2363]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fff52aaf130 a2=0 a3=7fff52aaf11c items=0 ppid=2205 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.375000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:51:54.375000 audit[2364]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2364 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.375000 audit[2364]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffdeb149130 a2=0 a3=7ffdeb14911c items=0 ppid=2205 pid=2364 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.375000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:51:54.377000 audit[2366]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.377000 audit[2366]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffd60a4f0e0 a2=0 a3=7ffd60a4f0cc items=0 ppid=2205 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.377000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:51:54.380000 audit[2369]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2369 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.380000 audit[2369]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffcdf81c1f0 a2=0 a3=7ffcdf81c1dc items=0 ppid=2205 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.380000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:51:54.383000 audit[2373]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2373 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.383000 audit[2373]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fff07a2b900 a2=0 a3=7fff07a2b8ec items=0 ppid=2205 pid=2373 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.383000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 15 11:51:54.384000 audit[2374]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2374 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.384000 audit[2374]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7fff19359360 a2=0 a3=7fff1935934c items=0 ppid=2205 pid=2374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.384000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:51:54.385000 audit[2376]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2376 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.385000 audit[2376]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7fff382655a0 a2=0 a3=7fff3826558c items=0 ppid=2205 pid=2376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.385000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:51:54.388000 audit[2379]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2379 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.388000 audit[2379]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7fff13bb53f0 a2=0 a3=7fff13bb53dc items=0 ppid=2205 pid=2379 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.388000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:51:54.388000 audit[2380]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.388000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fff272b2460 a2=0 a3=7fff272b244c items=0 ppid=2205 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.388000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:51:54.390000 audit[2382]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.390000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7ffe36b60ca0 a2=0 a3=7ffe36b60c8c items=0 ppid=2205 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.390000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:51:54.391000 audit[2383]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2383 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.391000 audit[2383]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd7cde9d10 a2=0 a3=7ffd7cde9cfc items=0 ppid=2205 pid=2383 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.391000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:51:54.393000 audit[2385]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2385 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.393000 audit[2385]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff5ee837b0 a2=0 a3=7fff5ee8379c items=0 ppid=2205 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.393000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:51:54.395000 audit[2388]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2388 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:51:54.395000 audit[2388]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffd9ed36390 a2=0 a3=7ffd9ed3637c items=0 ppid=2205 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.395000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:51:54.398000 audit[2390]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2390 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:51:54.398000 audit[2390]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7fffa951f9d0 a2=0 a3=7fffa951f9bc items=0 ppid=2205 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.398000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:51:54.398000 audit[2390]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2390 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:51:54.398000 audit[2390]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7fffa951f9d0 a2=0 a3=7fffa951f9bc items=0 ppid=2205 pid=2390 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:54.398000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:51:54.755784 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1275666617.mount: Deactivated successfully. Jul 15 11:51:55.403918 env[1245]: time="2025-07-15T11:51:55.403890781Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:55.404628 env[1245]: time="2025-07-15T11:51:55.404610263Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:55.405403 env[1245]: time="2025-07-15T11:51:55.405390780Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:55.406183 env[1245]: time="2025-07-15T11:51:55.406170222Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:51:55.406528 env[1245]: time="2025-07-15T11:51:55.406514866Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 15 11:51:55.408250 env[1245]: time="2025-07-15T11:51:55.408227520Z" level=info msg="CreateContainer within sandbox \"ba2e4c8056de224260be7c24147a56744d85378334c91e8ce79f9c17428fe4d6\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 15 11:51:55.416437 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1912019263.mount: Deactivated successfully. Jul 15 11:51:55.419184 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3583035060.mount: Deactivated successfully. Jul 15 11:51:55.426205 env[1245]: time="2025-07-15T11:51:55.426177518Z" level=info msg="CreateContainer within sandbox \"ba2e4c8056de224260be7c24147a56744d85378334c91e8ce79f9c17428fe4d6\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77\"" Jul 15 11:51:55.427425 env[1245]: time="2025-07-15T11:51:55.427401645Z" level=info msg="StartContainer for \"6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77\"" Jul 15 11:51:55.443119 systemd[1]: Started cri-containerd-6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77.scope. Jul 15 11:51:55.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit: BPF prog-id=114 op=LOAD Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2228 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:55.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662373539663964383363313462336663643039383665643661643836 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2228 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:55.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662373539663964383363313462336663643039383665643661643836 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit: BPF prog-id=115 op=LOAD Jul 15 11:51:55.453000 audit[2399]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0001af7b0 items=0 ppid=2228 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:55.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662373539663964383363313462336663643039383665643661643836 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit: BPF prog-id=116 op=LOAD Jul 15 11:51:55.453000 audit[2399]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0001af7f8 items=0 ppid=2228 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:55.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662373539663964383363313462336663643039383665643661643836 Jul 15 11:51:55.453000 audit: BPF prog-id=116 op=UNLOAD Jul 15 11:51:55.453000 audit: BPF prog-id=115 op=UNLOAD Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { perfmon } for pid=2399 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit[2399]: AVC avc: denied { bpf } for pid=2399 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:51:55.453000 audit: BPF prog-id=117 op=LOAD Jul 15 11:51:55.453000 audit[2399]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0001afc08 items=0 ppid=2228 pid=2399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:51:55.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3662373539663964383363313462336663643039383665643661643836 Jul 15 11:51:55.463394 env[1245]: time="2025-07-15T11:51:55.463364237Z" level=info msg="StartContainer for \"6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77\" returns successfully" Jul 15 11:52:00.618462 sudo[1471]: pam_unix(sudo:session): session closed for user root Jul 15 11:52:00.617000 audit[1471]: USER_END pid=1471 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:52:00.622288 kernel: kauditd_printk_skb: 370 callbacks suppressed Jul 15 11:52:00.622338 kernel: audit: type=1106 audit(1752580320.617:935): pid=1471 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:52:00.624953 kernel: audit: type=1104 audit(1752580320.617:936): pid=1471 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:52:00.617000 audit[1471]: CRED_DISP pid=1471 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:52:00.637392 sshd[1467]: pam_unix(sshd:session): session closed for user core Jul 15 11:52:00.641000 audit[1467]: USER_END pid=1467 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:52:00.641000 audit[1467]: CRED_DISP pid=1467 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:52:00.649809 kernel: audit: type=1106 audit(1752580320.641:937): pid=1467 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:52:00.649862 kernel: audit: type=1104 audit(1752580320.641:938): pid=1467 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:52:00.653000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.107:22-147.75.109.163:45148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:52:00.654831 systemd[1]: sshd@6-139.178.70.107:22-147.75.109.163:45148.service: Deactivated successfully. Jul 15 11:52:00.658802 kernel: audit: type=1131 audit(1752580320.653:939): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.107:22-147.75.109.163:45148 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:52:00.658188 systemd[1]: session-9.scope: Deactivated successfully. Jul 15 11:52:00.658316 systemd[1]: session-9.scope: Consumed 2.961s CPU time. Jul 15 11:52:00.658517 systemd-logind[1237]: Session 9 logged out. Waiting for processes to exit. Jul 15 11:52:00.659574 systemd-logind[1237]: Removed session 9. Jul 15 11:52:01.422000 audit[2477]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2477 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:01.422000 audit[2477]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff0b951c90 a2=0 a3=7fff0b951c7c items=0 ppid=2205 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:01.429426 kernel: audit: type=1325 audit(1752580321.422:940): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2477 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:01.429508 kernel: audit: type=1300 audit(1752580321.422:940): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7fff0b951c90 a2=0 a3=7fff0b951c7c items=0 ppid=2205 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:01.429529 kernel: audit: type=1327 audit(1752580321.422:940): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:01.422000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:01.430000 audit[2477]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2477 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:01.430000 audit[2477]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff0b951c90 a2=0 a3=0 items=0 ppid=2205 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:01.438946 kernel: audit: type=1325 audit(1752580321.430:941): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2477 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:01.439042 kernel: audit: type=1300 audit(1752580321.430:941): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fff0b951c90 a2=0 a3=0 items=0 ppid=2205 pid=2477 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:01.430000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:01.452000 audit[2479]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:01.452000 audit[2479]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffc9a757360 a2=0 a3=7ffc9a75734c items=0 ppid=2205 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:01.452000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:01.456000 audit[2479]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2479 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:01.456000 audit[2479]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffc9a757360 a2=0 a3=0 items=0 ppid=2205 pid=2479 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:01.456000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:02.643000 audit[2481]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2481 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:02.643000 audit[2481]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7ffd9181d630 a2=0 a3=7ffd9181d61c items=0 ppid=2205 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:02.643000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:02.648000 audit[2481]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2481 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:02.648000 audit[2481]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffd9181d630 a2=0 a3=0 items=0 ppid=2205 pid=2481 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:02.648000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:02.876948 kubelet[2102]: I0715 11:52:02.876906 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-5bf8dfcb4-69jm2" podStartSLOduration=8.167972528 podStartE2EDuration="9.876895025s" podCreationTimestamp="2025-07-15 11:51:53 +0000 UTC" firstStartedPulling="2025-07-15 11:51:53.698115646 +0000 UTC m=+3.031361646" lastFinishedPulling="2025-07-15 11:51:55.407038139 +0000 UTC m=+4.740284143" observedRunningTime="2025-07-15 11:51:55.846653557 +0000 UTC m=+5.179899577" watchObservedRunningTime="2025-07-15 11:52:02.876895025 +0000 UTC m=+12.210141032" Jul 15 11:52:02.906789 systemd[1]: Created slice kubepods-besteffort-pod094c1bb7_6645_4e2f_8d11_578ea5bad05c.slice. Jul 15 11:52:02.949714 kubelet[2102]: I0715 11:52:02.949688 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-dkjnc\" (UniqueName: \"kubernetes.io/projected/094c1bb7-6645-4e2f-8d11-578ea5bad05c-kube-api-access-dkjnc\") pod \"calico-typha-6fcc67b564-w27nf\" (UID: \"094c1bb7-6645-4e2f-8d11-578ea5bad05c\") " pod="calico-system/calico-typha-6fcc67b564-w27nf" Jul 15 11:52:02.949856 kubelet[2102]: I0715 11:52:02.949845 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/094c1bb7-6645-4e2f-8d11-578ea5bad05c-typha-certs\") pod \"calico-typha-6fcc67b564-w27nf\" (UID: \"094c1bb7-6645-4e2f-8d11-578ea5bad05c\") " pod="calico-system/calico-typha-6fcc67b564-w27nf" Jul 15 11:52:02.949957 kubelet[2102]: I0715 11:52:02.949948 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/094c1bb7-6645-4e2f-8d11-578ea5bad05c-tigera-ca-bundle\") pod \"calico-typha-6fcc67b564-w27nf\" (UID: \"094c1bb7-6645-4e2f-8d11-578ea5bad05c\") " pod="calico-system/calico-typha-6fcc67b564-w27nf" Jul 15 11:52:03.205716 systemd[1]: Created slice kubepods-besteffort-pod76959ef7_7145_4260_9435_b44ddfaf59a5.slice. Jul 15 11:52:03.213145 env[1245]: time="2025-07-15T11:52:03.212878821Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6fcc67b564-w27nf,Uid:094c1bb7-6645-4e2f-8d11-578ea5bad05c,Namespace:calico-system,Attempt:0,}" Jul 15 11:52:03.251336 kubelet[2102]: I0715 11:52:03.251316 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/76959ef7-7145-4260-9435-b44ddfaf59a5-cni-bin-dir\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.251475 kubelet[2102]: I0715 11:52:03.251465 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/76959ef7-7145-4260-9435-b44ddfaf59a5-var-run-calico\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.251547 kubelet[2102]: I0715 11:52:03.251539 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/76959ef7-7145-4260-9435-b44ddfaf59a5-lib-modules\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.251616 kubelet[2102]: I0715 11:52:03.251608 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/76959ef7-7145-4260-9435-b44ddfaf59a5-xtables-lock\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.251670 kubelet[2102]: I0715 11:52:03.251661 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/76959ef7-7145-4260-9435-b44ddfaf59a5-tigera-ca-bundle\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.251743 kubelet[2102]: I0715 11:52:03.251734 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/76959ef7-7145-4260-9435-b44ddfaf59a5-flexvol-driver-host\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.251804 kubelet[2102]: I0715 11:52:03.251787 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/76959ef7-7145-4260-9435-b44ddfaf59a5-node-certs\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.251861 kubelet[2102]: I0715 11:52:03.251851 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wp95k\" (UniqueName: \"kubernetes.io/projected/76959ef7-7145-4260-9435-b44ddfaf59a5-kube-api-access-wp95k\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.252343 kubelet[2102]: I0715 11:52:03.251933 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/76959ef7-7145-4260-9435-b44ddfaf59a5-cni-log-dir\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.252343 kubelet[2102]: I0715 11:52:03.251951 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/76959ef7-7145-4260-9435-b44ddfaf59a5-cni-net-dir\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.252343 kubelet[2102]: I0715 11:52:03.251960 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/76959ef7-7145-4260-9435-b44ddfaf59a5-policysync\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.252343 kubelet[2102]: I0715 11:52:03.251969 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/76959ef7-7145-4260-9435-b44ddfaf59a5-var-lib-calico\") pod \"calico-node-4lts6\" (UID: \"76959ef7-7145-4260-9435-b44ddfaf59a5\") " pod="calico-system/calico-node-4lts6" Jul 15 11:52:03.255934 env[1245]: time="2025-07-15T11:52:03.253024307Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:03.255934 env[1245]: time="2025-07-15T11:52:03.253069601Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:03.255934 env[1245]: time="2025-07-15T11:52:03.253085189Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:03.255934 env[1245]: time="2025-07-15T11:52:03.253176331Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/88aab88195b8a26e792c12cfaa714c0c3523a7f97dc3827a346623322798b414 pid=2491 runtime=io.containerd.runc.v2 Jul 15 11:52:03.265868 systemd[1]: Started cri-containerd-88aab88195b8a26e792c12cfaa714c0c3523a7f97dc3827a346623322798b414.scope. Jul 15 11:52:03.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit: BPF prog-id=118 op=LOAD Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2491 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838616162383831393562386132366537393263313263666161373134 Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=2491 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838616162383831393562386132366537393263313263666161373134 Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.281000 audit: BPF prog-id=119 op=LOAD Jul 15 11:52:03.281000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00025da20 items=0 ppid=2491 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.281000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838616162383831393562386132366537393263313263666161373134 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit: BPF prog-id=120 op=LOAD Jul 15 11:52:03.282000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00025da68 items=0 ppid=2491 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838616162383831393562386132366537393263313263666161373134 Jul 15 11:52:03.282000 audit: BPF prog-id=120 op=UNLOAD Jul 15 11:52:03.282000 audit: BPF prog-id=119 op=UNLOAD Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { perfmon } for pid=2502 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit[2502]: AVC avc: denied { bpf } for pid=2502 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.282000 audit: BPF prog-id=121 op=LOAD Jul 15 11:52:03.282000 audit[2502]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00025de78 items=0 ppid=2491 pid=2502 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3838616162383831393562386132366537393263313263666161373134 Jul 15 11:52:03.305992 env[1245]: time="2025-07-15T11:52:03.305959822Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-6fcc67b564-w27nf,Uid:094c1bb7-6645-4e2f-8d11-578ea5bad05c,Namespace:calico-system,Attempt:0,} returns sandbox id \"88aab88195b8a26e792c12cfaa714c0c3523a7f97dc3827a346623322798b414\"" Jul 15 11:52:03.307294 env[1245]: time="2025-07-15T11:52:03.307265978Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 15 11:52:03.362761 kubelet[2102]: E0715 11:52:03.362734 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.362761 kubelet[2102]: W0715 11:52:03.362754 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.362891 kubelet[2102]: E0715 11:52:03.362770 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.495625 kubelet[2102]: E0715 11:52:03.495525 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n9wvp" podUID="ce316714-6e1f-490d-9366-973c600e9360" Jul 15 11:52:03.508662 env[1245]: time="2025-07-15T11:52:03.508631029Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-4lts6,Uid:76959ef7-7145-4260-9435-b44ddfaf59a5,Namespace:calico-system,Attempt:0,}" Jul 15 11:52:03.520399 env[1245]: time="2025-07-15T11:52:03.520339736Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:03.520399 env[1245]: time="2025-07-15T11:52:03.520367859Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:03.520588 env[1245]: time="2025-07-15T11:52:03.520385401Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:03.520588 env[1245]: time="2025-07-15T11:52:03.520565008Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ac1fe766a59e1ed7a8f6c6c670ef3a019d58786c02a7aa6da8b8b76bce8b77a1 pid=2537 runtime=io.containerd.runc.v2 Jul 15 11:52:03.537318 systemd[1]: Started cri-containerd-ac1fe766a59e1ed7a8f6c6c670ef3a019d58786c02a7aa6da8b8b76bce8b77a1.scope. Jul 15 11:52:03.547018 kubelet[2102]: E0715 11:52:03.546832 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.547018 kubelet[2102]: W0715 11:52:03.546845 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.547018 kubelet[2102]: E0715 11:52:03.546858 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.547018 kubelet[2102]: E0715 11:52:03.546956 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.547018 kubelet[2102]: W0715 11:52:03.546962 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.547018 kubelet[2102]: E0715 11:52:03.546968 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.547844 kubelet[2102]: E0715 11:52:03.547184 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.547844 kubelet[2102]: W0715 11:52:03.547189 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.547844 kubelet[2102]: E0715 11:52:03.547195 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.547844 kubelet[2102]: E0715 11:52:03.547295 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.547844 kubelet[2102]: W0715 11:52:03.547300 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.547844 kubelet[2102]: E0715 11:52:03.547305 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.547844 kubelet[2102]: E0715 11:52:03.547411 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.547844 kubelet[2102]: W0715 11:52:03.547416 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.547844 kubelet[2102]: E0715 11:52:03.547421 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.548547 kubelet[2102]: E0715 11:52:03.548016 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.548547 kubelet[2102]: W0715 11:52:03.548024 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.548547 kubelet[2102]: E0715 11:52:03.548030 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.548547 kubelet[2102]: E0715 11:52:03.548123 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.548547 kubelet[2102]: W0715 11:52:03.548128 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.548547 kubelet[2102]: E0715 11:52:03.548133 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.548547 kubelet[2102]: E0715 11:52:03.548250 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.548547 kubelet[2102]: W0715 11:52:03.548256 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.548547 kubelet[2102]: E0715 11:52:03.548261 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.548547 kubelet[2102]: E0715 11:52:03.548377 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.548758 kubelet[2102]: W0715 11:52:03.548382 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.548758 kubelet[2102]: E0715 11:52:03.548387 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.548758 kubelet[2102]: E0715 11:52:03.548497 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.548758 kubelet[2102]: W0715 11:52:03.548502 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.548758 kubelet[2102]: E0715 11:52:03.548507 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.548000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.548000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550786 kubelet[2102]: E0715 11:52:03.548877 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.550786 kubelet[2102]: W0715 11:52:03.548884 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.550786 kubelet[2102]: E0715 11:52:03.548890 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.550786 kubelet[2102]: E0715 11:52:03.548977 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.550786 kubelet[2102]: W0715 11:52:03.548981 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.550786 kubelet[2102]: E0715 11:52:03.548986 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.550786 kubelet[2102]: E0715 11:52:03.549075 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.550786 kubelet[2102]: W0715 11:52:03.549079 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.550786 kubelet[2102]: E0715 11:52:03.549084 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.550786 kubelet[2102]: E0715 11:52:03.549234 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.550990 kubelet[2102]: W0715 11:52:03.549241 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.550990 kubelet[2102]: E0715 11:52:03.549247 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.550990 kubelet[2102]: E0715 11:52:03.549327 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.550990 kubelet[2102]: W0715 11:52:03.549332 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.550990 kubelet[2102]: E0715 11:52:03.549337 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.550990 kubelet[2102]: E0715 11:52:03.549425 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.550990 kubelet[2102]: W0715 11:52:03.549430 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.550990 kubelet[2102]: E0715 11:52:03.549435 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.550990 kubelet[2102]: E0715 11:52:03.549536 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.550990 kubelet[2102]: W0715 11:52:03.549541 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.549000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.549000 audit: BPF prog-id=122 op=LOAD Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=2537 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163316665373636613539653165643761386636633663363730656633 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=2537 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163316665373636613539653165643761386636633663363730656633 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit: BPF prog-id=123 op=LOAD Jul 15 11:52:03.550000 audit[2548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0001d8c40 items=0 ppid=2537 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163316665373636613539653165643761386636633663363730656633 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit: BPF prog-id=124 op=LOAD Jul 15 11:52:03.550000 audit[2548]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0001d8c88 items=0 ppid=2537 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163316665373636613539653165643761386636633663363730656633 Jul 15 11:52:03.550000 audit: BPF prog-id=124 op=UNLOAD Jul 15 11:52:03.550000 audit: BPF prog-id=123 op=UNLOAD Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { perfmon } for pid=2548 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit[2548]: AVC avc: denied { bpf } for pid=2548 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:03.550000 audit: BPF prog-id=125 op=LOAD Jul 15 11:52:03.550000 audit[2548]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0001d9098 items=0 ppid=2537 pid=2548 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.550000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6163316665373636613539653165643761386636633663363730656633 Jul 15 11:52:03.558796 kubelet[2102]: E0715 11:52:03.549547 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.558796 kubelet[2102]: E0715 11:52:03.550762 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.558796 kubelet[2102]: W0715 11:52:03.550769 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.558796 kubelet[2102]: E0715 11:52:03.550776 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.558796 kubelet[2102]: E0715 11:52:03.550868 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.558796 kubelet[2102]: W0715 11:52:03.550873 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.558796 kubelet[2102]: E0715 11:52:03.550878 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.558796 kubelet[2102]: E0715 11:52:03.550958 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.558796 kubelet[2102]: W0715 11:52:03.550963 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.558796 kubelet[2102]: E0715 11:52:03.550968 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.558979 kubelet[2102]: E0715 11:52:03.553891 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.558979 kubelet[2102]: W0715 11:52:03.553912 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.558979 kubelet[2102]: E0715 11:52:03.553936 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.558979 kubelet[2102]: I0715 11:52:03.553964 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/ce316714-6e1f-490d-9366-973c600e9360-registration-dir\") pod \"csi-node-driver-n9wvp\" (UID: \"ce316714-6e1f-490d-9366-973c600e9360\") " pod="calico-system/csi-node-driver-n9wvp" Jul 15 11:52:03.558979 kubelet[2102]: E0715 11:52:03.554117 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.558979 kubelet[2102]: W0715 11:52:03.554123 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.558979 kubelet[2102]: E0715 11:52:03.554134 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.558979 kubelet[2102]: I0715 11:52:03.554145 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/ce316714-6e1f-490d-9366-973c600e9360-socket-dir\") pod \"csi-node-driver-n9wvp\" (UID: \"ce316714-6e1f-490d-9366-973c600e9360\") " pod="calico-system/csi-node-driver-n9wvp" Jul 15 11:52:03.558979 kubelet[2102]: E0715 11:52:03.554311 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559140 kubelet[2102]: W0715 11:52:03.554324 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559140 kubelet[2102]: E0715 11:52:03.554333 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559140 kubelet[2102]: I0715 11:52:03.554346 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-pthl7\" (UniqueName: \"kubernetes.io/projected/ce316714-6e1f-490d-9366-973c600e9360-kube-api-access-pthl7\") pod \"csi-node-driver-n9wvp\" (UID: \"ce316714-6e1f-490d-9366-973c600e9360\") " pod="calico-system/csi-node-driver-n9wvp" Jul 15 11:52:03.559140 kubelet[2102]: E0715 11:52:03.554663 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559140 kubelet[2102]: W0715 11:52:03.554672 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559140 kubelet[2102]: E0715 11:52:03.554796 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559140 kubelet[2102]: E0715 11:52:03.554915 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559140 kubelet[2102]: W0715 11:52:03.554922 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559140 kubelet[2102]: E0715 11:52:03.554936 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559319 kubelet[2102]: E0715 11:52:03.555042 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559319 kubelet[2102]: W0715 11:52:03.555047 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559319 kubelet[2102]: E0715 11:52:03.555056 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559319 kubelet[2102]: E0715 11:52:03.555166 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559319 kubelet[2102]: W0715 11:52:03.555171 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559319 kubelet[2102]: E0715 11:52:03.555183 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559319 kubelet[2102]: E0715 11:52:03.555266 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559319 kubelet[2102]: W0715 11:52:03.555271 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559319 kubelet[2102]: E0715 11:52:03.555280 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559518 kubelet[2102]: I0715 11:52:03.555291 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/ce316714-6e1f-490d-9366-973c600e9360-kubelet-dir\") pod \"csi-node-driver-n9wvp\" (UID: \"ce316714-6e1f-490d-9366-973c600e9360\") " pod="calico-system/csi-node-driver-n9wvp" Jul 15 11:52:03.559518 kubelet[2102]: E0715 11:52:03.555366 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559518 kubelet[2102]: W0715 11:52:03.555373 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559518 kubelet[2102]: E0715 11:52:03.555382 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559518 kubelet[2102]: E0715 11:52:03.555528 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559518 kubelet[2102]: W0715 11:52:03.555533 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559518 kubelet[2102]: E0715 11:52:03.555541 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559518 kubelet[2102]: E0715 11:52:03.555627 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559518 kubelet[2102]: W0715 11:52:03.555632 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559689 kubelet[2102]: E0715 11:52:03.555637 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559689 kubelet[2102]: I0715 11:52:03.555646 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/ce316714-6e1f-490d-9366-973c600e9360-varrun\") pod \"csi-node-driver-n9wvp\" (UID: \"ce316714-6e1f-490d-9366-973c600e9360\") " pod="calico-system/csi-node-driver-n9wvp" Jul 15 11:52:03.559689 kubelet[2102]: E0715 11:52:03.555736 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559689 kubelet[2102]: W0715 11:52:03.555742 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559689 kubelet[2102]: E0715 11:52:03.555751 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559689 kubelet[2102]: E0715 11:52:03.555828 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559689 kubelet[2102]: W0715 11:52:03.555833 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559689 kubelet[2102]: E0715 11:52:03.555838 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559689 kubelet[2102]: E0715 11:52:03.555920 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559856 kubelet[2102]: W0715 11:52:03.555924 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559856 kubelet[2102]: E0715 11:52:03.555929 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.559856 kubelet[2102]: E0715 11:52:03.556638 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.559856 kubelet[2102]: W0715 11:52:03.556643 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.559856 kubelet[2102]: E0715 11:52:03.556650 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.564195 env[1245]: time="2025-07-15T11:52:03.564173117Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-4lts6,Uid:76959ef7-7145-4260-9435-b44ddfaf59a5,Namespace:calico-system,Attempt:0,} returns sandbox id \"ac1fe766a59e1ed7a8f6c6c670ef3a019d58786c02a7aa6da8b8b76bce8b77a1\"" Jul 15 11:52:03.657190 kubelet[2102]: E0715 11:52:03.656823 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.657190 kubelet[2102]: W0715 11:52:03.656881 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.657190 kubelet[2102]: E0715 11:52:03.656899 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.657190 kubelet[2102]: E0715 11:52:03.657113 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.657190 kubelet[2102]: W0715 11:52:03.657118 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.657190 kubelet[2102]: E0715 11:52:03.657127 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.657619 kubelet[2102]: E0715 11:52:03.657574 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.657619 kubelet[2102]: W0715 11:52:03.657581 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.657619 kubelet[2102]: E0715 11:52:03.657593 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.657787 kubelet[2102]: E0715 11:52:03.657771 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.657787 kubelet[2102]: W0715 11:52:03.657782 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.657861 kubelet[2102]: E0715 11:52:03.657793 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.657971 kubelet[2102]: E0715 11:52:03.657961 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.657971 kubelet[2102]: W0715 11:52:03.657969 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.658040 kubelet[2102]: E0715 11:52:03.657979 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.658136 kubelet[2102]: E0715 11:52:03.658122 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.658136 kubelet[2102]: W0715 11:52:03.658129 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.658136 kubelet[2102]: E0715 11:52:03.658134 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.658289 kubelet[2102]: E0715 11:52:03.658280 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.658289 kubelet[2102]: W0715 11:52:03.658286 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.658289 kubelet[2102]: E0715 11:52:03.658294 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.658499 kubelet[2102]: E0715 11:52:03.658470 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.658499 kubelet[2102]: W0715 11:52:03.658477 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.658499 kubelet[2102]: E0715 11:52:03.658487 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.658630 kubelet[2102]: E0715 11:52:03.658570 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.658630 kubelet[2102]: W0715 11:52:03.658575 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.658630 kubelet[2102]: E0715 11:52:03.658580 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.658762 kubelet[2102]: E0715 11:52:03.658750 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.658762 kubelet[2102]: W0715 11:52:03.658757 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.658762 kubelet[2102]: E0715 11:52:03.658762 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.658911 kubelet[2102]: E0715 11:52:03.658901 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.658911 kubelet[2102]: W0715 11:52:03.658910 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.659054 kubelet[2102]: E0715 11:52:03.658990 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.659099 kubelet[2102]: E0715 11:52:03.659060 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.659099 kubelet[2102]: W0715 11:52:03.659065 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.659146 kubelet[2102]: E0715 11:52:03.659139 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.659146 kubelet[2102]: W0715 11:52:03.659144 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.659187 kubelet[2102]: E0715 11:52:03.659149 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.659286 kubelet[2102]: E0715 11:52:03.659218 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.659361 kubelet[2102]: E0715 11:52:03.659297 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.659361 kubelet[2102]: W0715 11:52:03.659302 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.659361 kubelet[2102]: E0715 11:52:03.659310 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.659506 kubelet[2102]: E0715 11:52:03.659423 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.659506 kubelet[2102]: W0715 11:52:03.659428 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.659506 kubelet[2102]: E0715 11:52:03.659432 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.659606 kubelet[2102]: E0715 11:52:03.659589 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.659606 kubelet[2102]: W0715 11:52:03.659597 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.659606 kubelet[2102]: E0715 11:52:03.659602 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.659762 kubelet[2102]: E0715 11:52:03.659754 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.659762 kubelet[2102]: W0715 11:52:03.659760 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.659830 kubelet[2102]: E0715 11:52:03.659767 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.659869 kubelet[2102]: E0715 11:52:03.659858 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.659869 kubelet[2102]: W0715 11:52:03.659865 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.659869 kubelet[2102]: E0715 11:52:03.659872 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.660090 kubelet[2102]: E0715 11:52:03.660020 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.660090 kubelet[2102]: W0715 11:52:03.660026 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.660090 kubelet[2102]: E0715 11:52:03.660031 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.660333 kubelet[2102]: E0715 11:52:03.660233 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.660333 kubelet[2102]: W0715 11:52:03.660240 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.660333 kubelet[2102]: E0715 11:52:03.660249 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.660559 kubelet[2102]: E0715 11:52:03.660530 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.660559 kubelet[2102]: W0715 11:52:03.660537 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.660559 kubelet[2102]: E0715 11:52:03.660549 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.660636 kubelet[2102]: E0715 11:52:03.660626 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.660636 kubelet[2102]: W0715 11:52:03.660632 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.660685 kubelet[2102]: E0715 11:52:03.660640 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.660920 kubelet[2102]: E0715 11:52:03.660780 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.660920 kubelet[2102]: W0715 11:52:03.660787 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.660920 kubelet[2102]: E0715 11:52:03.660794 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.661122 kubelet[2102]: E0715 11:52:03.661051 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.661122 kubelet[2102]: W0715 11:52:03.661058 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.661122 kubelet[2102]: E0715 11:52:03.661064 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.663569 kubelet[2102]: E0715 11:52:03.663522 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.663569 kubelet[2102]: W0715 11:52:03.663534 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.663569 kubelet[2102]: E0715 11:52:03.663543 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.664000 audit[2632]: NETFILTER_CFG table=filter:95 family=2 entries=20 op=nft_register_rule pid=2632 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:03.664000 audit[2632]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffe95bf1d50 a2=0 a3=7ffe95bf1d3c items=0 ppid=2205 pid=2632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.664000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:03.667599 kubelet[2102]: E0715 11:52:03.667581 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:03.667685 kubelet[2102]: W0715 11:52:03.667673 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:03.667742 kubelet[2102]: E0715 11:52:03.667733 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:03.669000 audit[2632]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2632 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:03.669000 audit[2632]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffe95bf1d50 a2=0 a3=0 items=0 ppid=2205 pid=2632 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:03.669000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:04.057336 systemd[1]: run-containerd-runc-k8s.io-88aab88195b8a26e792c12cfaa714c0c3523a7f97dc3827a346623322798b414-runc.Ru5VIJ.mount: Deactivated successfully. Jul 15 11:52:04.784022 kubelet[2102]: E0715 11:52:04.783742 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n9wvp" podUID="ce316714-6e1f-490d-9366-973c600e9360" Jul 15 11:52:04.927308 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount418476298.mount: Deactivated successfully. Jul 15 11:52:06.078247 env[1245]: time="2025-07-15T11:52:06.078217096Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:06.101585 env[1245]: time="2025-07-15T11:52:06.101556519Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:06.114138 env[1245]: time="2025-07-15T11:52:06.114114806Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:06.131256 env[1245]: time="2025-07-15T11:52:06.131231223Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 15 11:52:06.131459 env[1245]: time="2025-07-15T11:52:06.130819083Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:06.132807 env[1245]: time="2025-07-15T11:52:06.132791240Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 15 11:52:06.143616 env[1245]: time="2025-07-15T11:52:06.143587988Z" level=info msg="CreateContainer within sandbox \"88aab88195b8a26e792c12cfaa714c0c3523a7f97dc3827a346623322798b414\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 15 11:52:06.191178 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2289477468.mount: Deactivated successfully. Jul 15 11:52:06.341636 env[1245]: time="2025-07-15T11:52:06.341574214Z" level=info msg="CreateContainer within sandbox \"88aab88195b8a26e792c12cfaa714c0c3523a7f97dc3827a346623322798b414\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"ddb4a1ffa85f0257162ad5fefd975ac922d29688177d81a396ffaf0d97c04e2f\"" Jul 15 11:52:06.342206 env[1245]: time="2025-07-15T11:52:06.342191002Z" level=info msg="StartContainer for \"ddb4a1ffa85f0257162ad5fefd975ac922d29688177d81a396ffaf0d97c04e2f\"" Jul 15 11:52:06.357464 systemd[1]: Started cri-containerd-ddb4a1ffa85f0257162ad5fefd975ac922d29688177d81a396ffaf0d97c04e2f.scope. Jul 15 11:52:06.377476 kernel: kauditd_printk_skb: 133 callbacks suppressed Jul 15 11:52:06.377567 kernel: audit: type=1400 audit(1752580326.371:984): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377595 kernel: audit: type=1400 audit(1752580326.371:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.381508 kernel: audit: type=1400 audit(1752580326.371:986): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.384089 kernel: audit: type=1400 audit(1752580326.371:987): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.386767 kernel: audit: type=1400 audit(1752580326.371:988): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.387772 kernel: audit: type=1400 audit(1752580326.371:989): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.391784 kernel: audit: type=1400 audit(1752580326.371:990): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.371000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.394364 kernel: audit: type=1400 audit(1752580326.371:991): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.371000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.375000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.401167 kernel: audit: type=1400 audit(1752580326.371:992): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.401222 kernel: audit: type=1400 audit(1752580326.375:993): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.375000 audit: BPF prog-id=126 op=LOAD Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2491 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:06.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464623461316666613835663032353731363261643566656664393735 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2491 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:06.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464623461316666613835663032353731363261643566656664393735 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit: BPF prog-id=127 op=LOAD Jul 15 11:52:06.377000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002ad990 items=0 ppid=2491 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:06.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464623461316666613835663032353731363261643566656664393735 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit: BPF prog-id=128 op=LOAD Jul 15 11:52:06.377000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002ad9d8 items=0 ppid=2491 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:06.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464623461316666613835663032353731363261643566656664393735 Jul 15 11:52:06.377000 audit: BPF prog-id=128 op=UNLOAD Jul 15 11:52:06.377000 audit: BPF prog-id=127 op=UNLOAD Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { perfmon } for pid=2647 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit[2647]: AVC avc: denied { bpf } for pid=2647 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:06.377000 audit: BPF prog-id=129 op=LOAD Jul 15 11:52:06.377000 audit[2647]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002adde8 items=0 ppid=2491 pid=2647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:06.377000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6464623461316666613835663032353731363261643566656664393735 Jul 15 11:52:06.423287 env[1245]: time="2025-07-15T11:52:06.423251069Z" level=info msg="StartContainer for \"ddb4a1ffa85f0257162ad5fefd975ac922d29688177d81a396ffaf0d97c04e2f\" returns successfully" Jul 15 11:52:06.784748 kubelet[2102]: E0715 11:52:06.784465 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n9wvp" podUID="ce316714-6e1f-490d-9366-973c600e9360" Jul 15 11:52:06.859992 kubelet[2102]: I0715 11:52:06.859955 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-6fcc67b564-w27nf" podStartSLOduration=2.03462786 podStartE2EDuration="4.859943961s" podCreationTimestamp="2025-07-15 11:52:02 +0000 UTC" firstStartedPulling="2025-07-15 11:52:03.306930212 +0000 UTC m=+12.640176213" lastFinishedPulling="2025-07-15 11:52:06.132246309 +0000 UTC m=+15.465492314" observedRunningTime="2025-07-15 11:52:06.859788989 +0000 UTC m=+16.193034998" watchObservedRunningTime="2025-07-15 11:52:06.859943961 +0000 UTC m=+16.193189968" Jul 15 11:52:06.876304 kubelet[2102]: E0715 11:52:06.876282 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.876304 kubelet[2102]: W0715 11:52:06.876298 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.876425 kubelet[2102]: E0715 11:52:06.876320 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.876496 kubelet[2102]: E0715 11:52:06.876485 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.876496 kubelet[2102]: W0715 11:52:06.876495 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.876548 kubelet[2102]: E0715 11:52:06.876501 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.876595 kubelet[2102]: E0715 11:52:06.876585 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.876595 kubelet[2102]: W0715 11:52:06.876593 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.876638 kubelet[2102]: E0715 11:52:06.876599 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.876692 kubelet[2102]: E0715 11:52:06.876682 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.876717 kubelet[2102]: W0715 11:52:06.876692 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.876717 kubelet[2102]: E0715 11:52:06.876700 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.876800 kubelet[2102]: E0715 11:52:06.876790 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.876824 kubelet[2102]: W0715 11:52:06.876799 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.876824 kubelet[2102]: E0715 11:52:06.876805 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.876895 kubelet[2102]: E0715 11:52:06.876885 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.876895 kubelet[2102]: W0715 11:52:06.876893 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.876941 kubelet[2102]: E0715 11:52:06.876898 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.876986 kubelet[2102]: E0715 11:52:06.876975 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.876986 kubelet[2102]: W0715 11:52:06.876984 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.877046 kubelet[2102]: E0715 11:52:06.876990 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.877109 kubelet[2102]: E0715 11:52:06.877098 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.877109 kubelet[2102]: W0715 11:52:06.877106 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.877165 kubelet[2102]: E0715 11:52:06.877113 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.877227 kubelet[2102]: E0715 11:52:06.877218 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.877227 kubelet[2102]: W0715 11:52:06.877224 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.877279 kubelet[2102]: E0715 11:52:06.877229 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.877327 kubelet[2102]: E0715 11:52:06.877311 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.877362 kubelet[2102]: W0715 11:52:06.877330 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.877362 kubelet[2102]: E0715 11:52:06.877337 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.877480 kubelet[2102]: E0715 11:52:06.877455 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.877480 kubelet[2102]: W0715 11:52:06.877462 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.877480 kubelet[2102]: E0715 11:52:06.877468 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.877568 kubelet[2102]: E0715 11:52:06.877559 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.877568 kubelet[2102]: W0715 11:52:06.877565 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.877627 kubelet[2102]: E0715 11:52:06.877570 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.877665 kubelet[2102]: E0715 11:52:06.877655 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.877665 kubelet[2102]: W0715 11:52:06.877662 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.877711 kubelet[2102]: E0715 11:52:06.877667 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.877782 kubelet[2102]: E0715 11:52:06.877772 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.877782 kubelet[2102]: W0715 11:52:06.877779 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.877835 kubelet[2102]: E0715 11:52:06.877784 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.877878 kubelet[2102]: E0715 11:52:06.877868 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.877878 kubelet[2102]: W0715 11:52:06.877876 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.877927 kubelet[2102]: E0715 11:52:06.877883 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.880132 kubelet[2102]: E0715 11:52:06.880115 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.880132 kubelet[2102]: W0715 11:52:06.880129 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.880220 kubelet[2102]: E0715 11:52:06.880137 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.880282 kubelet[2102]: E0715 11:52:06.880270 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.880282 kubelet[2102]: W0715 11:52:06.880278 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.880344 kubelet[2102]: E0715 11:52:06.880286 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.880546 kubelet[2102]: E0715 11:52:06.880535 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.880546 kubelet[2102]: W0715 11:52:06.880543 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.880956 kubelet[2102]: E0715 11:52:06.880552 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.880956 kubelet[2102]: E0715 11:52:06.880691 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.880956 kubelet[2102]: W0715 11:52:06.880698 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.880956 kubelet[2102]: E0715 11:52:06.880711 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.880956 kubelet[2102]: E0715 11:52:06.880843 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.880956 kubelet[2102]: W0715 11:52:06.880847 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.880956 kubelet[2102]: E0715 11:52:06.880854 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.881085 kubelet[2102]: E0715 11:52:06.881017 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.881085 kubelet[2102]: W0715 11:52:06.881022 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.881085 kubelet[2102]: E0715 11:52:06.881027 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.881140 kubelet[2102]: E0715 11:52:06.881136 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.881178 kubelet[2102]: W0715 11:52:06.881141 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.881178 kubelet[2102]: E0715 11:52:06.881173 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.881480 kubelet[2102]: E0715 11:52:06.881316 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.881480 kubelet[2102]: W0715 11:52:06.881326 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.881480 kubelet[2102]: E0715 11:52:06.881334 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.881480 kubelet[2102]: E0715 11:52:06.881415 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.881480 kubelet[2102]: W0715 11:52:06.881420 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.881480 kubelet[2102]: E0715 11:52:06.881426 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.881663 kubelet[2102]: E0715 11:52:06.881632 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.881663 kubelet[2102]: W0715 11:52:06.881639 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.881663 kubelet[2102]: E0715 11:52:06.881649 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.881742 kubelet[2102]: E0715 11:52:06.881731 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.881742 kubelet[2102]: W0715 11:52:06.881738 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.881805 kubelet[2102]: E0715 11:52:06.881747 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.881869 kubelet[2102]: E0715 11:52:06.881857 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.881869 kubelet[2102]: W0715 11:52:06.881866 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.881936 kubelet[2102]: E0715 11:52:06.881875 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.882016 kubelet[2102]: E0715 11:52:06.881975 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.882016 kubelet[2102]: W0715 11:52:06.881982 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.882016 kubelet[2102]: E0715 11:52:06.881989 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.882097 kubelet[2102]: E0715 11:52:06.882074 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.882097 kubelet[2102]: W0715 11:52:06.882079 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.882097 kubelet[2102]: E0715 11:52:06.882091 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.882202 kubelet[2102]: E0715 11:52:06.882194 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.882202 kubelet[2102]: W0715 11:52:06.882200 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.882263 kubelet[2102]: E0715 11:52:06.882207 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.882363 kubelet[2102]: E0715 11:52:06.882354 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.882394 kubelet[2102]: W0715 11:52:06.882389 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.882425 kubelet[2102]: E0715 11:52:06.882403 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.882521 kubelet[2102]: E0715 11:52:06.882512 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.882521 kubelet[2102]: W0715 11:52:06.882518 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.882575 kubelet[2102]: E0715 11:52:06.882541 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:06.882812 kubelet[2102]: E0715 11:52:06.882802 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:06.882812 kubelet[2102]: W0715 11:52:06.882811 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:06.882872 kubelet[2102]: E0715 11:52:06.882818 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.852815 kubelet[2102]: I0715 11:52:07.852788 2102 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:52:07.859769 env[1245]: time="2025-07-15T11:52:07.859742912Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:07.862154 env[1245]: time="2025-07-15T11:52:07.862126964Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:07.863215 env[1245]: time="2025-07-15T11:52:07.863193556Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:07.865085 env[1245]: time="2025-07-15T11:52:07.865064596Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:07.865392 env[1245]: time="2025-07-15T11:52:07.865371495Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 15 11:52:07.867474 env[1245]: time="2025-07-15T11:52:07.867108782Z" level=info msg="CreateContainer within sandbox \"ac1fe766a59e1ed7a8f6c6c670ef3a019d58786c02a7aa6da8b8b76bce8b77a1\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 15 11:52:07.877903 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount984590495.mount: Deactivated successfully. Jul 15 11:52:07.884735 kubelet[2102]: E0715 11:52:07.884633 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.884735 kubelet[2102]: W0715 11:52:07.884648 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.884735 kubelet[2102]: E0715 11:52:07.884662 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.885005 kubelet[2102]: E0715 11:52:07.884918 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.885005 kubelet[2102]: W0715 11:52:07.884925 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.885005 kubelet[2102]: E0715 11:52:07.884933 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.885220 kubelet[2102]: E0715 11:52:07.885150 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.885220 kubelet[2102]: W0715 11:52:07.885157 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.885220 kubelet[2102]: E0715 11:52:07.885163 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.885422 kubelet[2102]: E0715 11:52:07.885349 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.885422 kubelet[2102]: W0715 11:52:07.885355 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.885422 kubelet[2102]: E0715 11:52:07.885360 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.885618 kubelet[2102]: E0715 11:52:07.885548 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.885618 kubelet[2102]: W0715 11:52:07.885556 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.885618 kubelet[2102]: E0715 11:52:07.885564 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.885801 kubelet[2102]: E0715 11:52:07.885740 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.885801 kubelet[2102]: W0715 11:52:07.885746 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.885801 kubelet[2102]: E0715 11:52:07.885751 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.885997 kubelet[2102]: E0715 11:52:07.885926 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.885997 kubelet[2102]: W0715 11:52:07.885932 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.885997 kubelet[2102]: E0715 11:52:07.885937 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.886190 kubelet[2102]: E0715 11:52:07.886111 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.886190 kubelet[2102]: W0715 11:52:07.886117 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.886190 kubelet[2102]: E0715 11:52:07.886122 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.886420 kubelet[2102]: E0715 11:52:07.886316 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.886420 kubelet[2102]: W0715 11:52:07.886325 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.886420 kubelet[2102]: E0715 11:52:07.886333 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.886593 kubelet[2102]: E0715 11:52:07.886531 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.886593 kubelet[2102]: W0715 11:52:07.886537 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.886593 kubelet[2102]: E0715 11:52:07.886543 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.886790 kubelet[2102]: E0715 11:52:07.886725 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.886790 kubelet[2102]: W0715 11:52:07.886732 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.886790 kubelet[2102]: E0715 11:52:07.886737 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.886993 kubelet[2102]: E0715 11:52:07.886919 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.886993 kubelet[2102]: W0715 11:52:07.886925 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.886993 kubelet[2102]: E0715 11:52:07.886931 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.887193 kubelet[2102]: E0715 11:52:07.887119 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.887193 kubelet[2102]: W0715 11:52:07.887125 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.887193 kubelet[2102]: E0715 11:52:07.887131 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.887366 kubelet[2102]: E0715 11:52:07.887303 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.887366 kubelet[2102]: W0715 11:52:07.887309 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.887366 kubelet[2102]: E0715 11:52:07.887314 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.887599 kubelet[2102]: E0715 11:52:07.887497 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.887599 kubelet[2102]: W0715 11:52:07.887505 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.887599 kubelet[2102]: E0715 11:52:07.887512 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.887815 kubelet[2102]: E0715 11:52:07.887723 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.887815 kubelet[2102]: W0715 11:52:07.887729 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.887815 kubelet[2102]: E0715 11:52:07.887735 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.887985 kubelet[2102]: E0715 11:52:07.887944 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.887985 kubelet[2102]: W0715 11:52:07.887951 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.887985 kubelet[2102]: E0715 11:52:07.887960 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.888079 kubelet[2102]: E0715 11:52:07.888067 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.888079 kubelet[2102]: W0715 11:52:07.888078 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.888148 kubelet[2102]: E0715 11:52:07.888091 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.888201 kubelet[2102]: E0715 11:52:07.888192 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.888201 kubelet[2102]: W0715 11:52:07.888200 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.888279 kubelet[2102]: E0715 11:52:07.888208 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.888318 kubelet[2102]: E0715 11:52:07.888290 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.888318 kubelet[2102]: W0715 11:52:07.888303 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.888318 kubelet[2102]: E0715 11:52:07.888310 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.888425 kubelet[2102]: E0715 11:52:07.888416 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.888483 kubelet[2102]: W0715 11:52:07.888425 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.888483 kubelet[2102]: E0715 11:52:07.888435 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.888677 kubelet[2102]: E0715 11:52:07.888659 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.888677 kubelet[2102]: W0715 11:52:07.888674 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.888740 kubelet[2102]: E0715 11:52:07.888683 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.888798 kubelet[2102]: E0715 11:52:07.888788 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.888798 kubelet[2102]: W0715 11:52:07.888796 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.888867 kubelet[2102]: E0715 11:52:07.888804 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.888919 kubelet[2102]: E0715 11:52:07.888910 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.888919 kubelet[2102]: W0715 11:52:07.888918 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.888972 kubelet[2102]: E0715 11:52:07.888925 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.889025 kubelet[2102]: E0715 11:52:07.889015 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.889067 kubelet[2102]: W0715 11:52:07.889028 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.889067 kubelet[2102]: E0715 11:52:07.889037 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.889130 kubelet[2102]: E0715 11:52:07.889120 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.889130 kubelet[2102]: W0715 11:52:07.889127 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.889285 kubelet[2102]: E0715 11:52:07.889206 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.889285 kubelet[2102]: E0715 11:52:07.889210 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.889285 kubelet[2102]: W0715 11:52:07.889233 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.889285 kubelet[2102]: E0715 11:52:07.889240 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.889550 kubelet[2102]: E0715 11:52:07.889519 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.889550 kubelet[2102]: W0715 11:52:07.889527 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.889550 kubelet[2102]: E0715 11:52:07.889540 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.889727 kubelet[2102]: E0715 11:52:07.889711 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.889727 kubelet[2102]: W0715 11:52:07.889723 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.889795 kubelet[2102]: E0715 11:52:07.889733 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.890836 kubelet[2102]: E0715 11:52:07.890159 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.890836 kubelet[2102]: W0715 11:52:07.890167 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.890836 kubelet[2102]: E0715 11:52:07.890174 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.890836 kubelet[2102]: E0715 11:52:07.890269 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.890836 kubelet[2102]: W0715 11:52:07.890274 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.890836 kubelet[2102]: E0715 11:52:07.890283 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.890836 kubelet[2102]: E0715 11:52:07.890573 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.890836 kubelet[2102]: W0715 11:52:07.890582 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.890836 kubelet[2102]: E0715 11:52:07.890588 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.891056 kubelet[2102]: E0715 11:52:07.890859 2102 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:52:07.891056 kubelet[2102]: W0715 11:52:07.890871 2102 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:52:07.891056 kubelet[2102]: E0715 11:52:07.890878 2102 plugins.go:691] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:52:07.894889 env[1245]: time="2025-07-15T11:52:07.894862011Z" level=info msg="CreateContainer within sandbox \"ac1fe766a59e1ed7a8f6c6c670ef3a019d58786c02a7aa6da8b8b76bce8b77a1\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"52875bd560570f2ea95103a05960e841d345d7050b9bcfb0b27d0e604f29c02b\"" Jul 15 11:52:07.895969 env[1245]: time="2025-07-15T11:52:07.895951333Z" level=info msg="StartContainer for \"52875bd560570f2ea95103a05960e841d345d7050b9bcfb0b27d0e604f29c02b\"" Jul 15 11:52:07.943051 systemd[1]: Started cri-containerd-52875bd560570f2ea95103a05960e841d345d7050b9bcfb0b27d0e604f29c02b.scope. Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f1c2fc38298 items=0 ppid=2537 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:07.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532383735626435363035373066326561393531303361303539363065 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit: BPF prog-id=130 op=LOAD Jul 15 11:52:07.988000 audit[2752]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0001e3f48 items=0 ppid=2537 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:07.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532383735626435363035373066326561393531303361303539363065 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit: BPF prog-id=131 op=LOAD Jul 15 11:52:07.988000 audit[2752]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0001e3f98 items=0 ppid=2537 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:07.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532383735626435363035373066326561393531303361303539363065 Jul 15 11:52:07.988000 audit: BPF prog-id=131 op=UNLOAD Jul 15 11:52:07.988000 audit: BPF prog-id=130 op=UNLOAD Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { perfmon } for pid=2752 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit[2752]: AVC avc: denied { bpf } for pid=2752 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:07.988000 audit: BPF prog-id=132 op=LOAD Jul 15 11:52:07.988000 audit[2752]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003b2028 items=0 ppid=2537 pid=2752 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:07.988000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3532383735626435363035373066326561393531303361303539363065 Jul 15 11:52:08.007336 systemd[1]: cri-containerd-52875bd560570f2ea95103a05960e841d345d7050b9bcfb0b27d0e604f29c02b.scope: Deactivated successfully. Jul 15 11:52:08.009000 audit: BPF prog-id=132 op=UNLOAD Jul 15 11:52:08.136633 systemd[1]: run-containerd-runc-k8s.io-52875bd560570f2ea95103a05960e841d345d7050b9bcfb0b27d0e604f29c02b-runc.Xr3IE3.mount: Deactivated successfully. Jul 15 11:52:08.305017 env[1245]: time="2025-07-15T11:52:08.304980567Z" level=info msg="StartContainer for \"52875bd560570f2ea95103a05960e841d345d7050b9bcfb0b27d0e604f29c02b\" returns successfully" Jul 15 11:52:08.321057 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-52875bd560570f2ea95103a05960e841d345d7050b9bcfb0b27d0e604f29c02b-rootfs.mount: Deactivated successfully. Jul 15 11:52:08.479234 env[1245]: time="2025-07-15T11:52:08.479180416Z" level=info msg="shim disconnected" id=52875bd560570f2ea95103a05960e841d345d7050b9bcfb0b27d0e604f29c02b Jul 15 11:52:08.479234 env[1245]: time="2025-07-15T11:52:08.479229135Z" level=warning msg="cleaning up after shim disconnected" id=52875bd560570f2ea95103a05960e841d345d7050b9bcfb0b27d0e604f29c02b namespace=k8s.io Jul 15 11:52:08.479234 env[1245]: time="2025-07-15T11:52:08.479240508Z" level=info msg="cleaning up dead shim" Jul 15 11:52:08.485931 env[1245]: time="2025-07-15T11:52:08.485905500Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:52:08Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2791 runtime=io.containerd.runc.v2\n" Jul 15 11:52:08.784521 kubelet[2102]: E0715 11:52:08.784431 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n9wvp" podUID="ce316714-6e1f-490d-9366-973c600e9360" Jul 15 11:52:08.855982 env[1245]: time="2025-07-15T11:52:08.855957558Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 15 11:52:10.784644 kubelet[2102]: E0715 11:52:10.783989 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n9wvp" podUID="ce316714-6e1f-490d-9366-973c600e9360" Jul 15 11:52:12.783946 kubelet[2102]: E0715 11:52:12.783578 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n9wvp" podUID="ce316714-6e1f-490d-9366-973c600e9360" Jul 15 11:52:13.465882 env[1245]: time="2025-07-15T11:52:13.465844907Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:13.489855 env[1245]: time="2025-07-15T11:52:13.489819955Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:13.505585 env[1245]: time="2025-07-15T11:52:13.505554851Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:13.513515 env[1245]: time="2025-07-15T11:52:13.513491170Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:13.514007 env[1245]: time="2025-07-15T11:52:13.513984049Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 15 11:52:13.515762 env[1245]: time="2025-07-15T11:52:13.515742689Z" level=info msg="CreateContainer within sandbox \"ac1fe766a59e1ed7a8f6c6c670ef3a019d58786c02a7aa6da8b8b76bce8b77a1\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 15 11:52:13.558293 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2601565597.mount: Deactivated successfully. Jul 15 11:52:13.570611 env[1245]: time="2025-07-15T11:52:13.570578079Z" level=info msg="CreateContainer within sandbox \"ac1fe766a59e1ed7a8f6c6c670ef3a019d58786c02a7aa6da8b8b76bce8b77a1\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"bc5e4ec5da628f98de94d1ac8ab21b74efa25b7a7a56f7f0b0fcb355886cb435\"" Jul 15 11:52:13.571463 env[1245]: time="2025-07-15T11:52:13.571002842Z" level=info msg="StartContainer for \"bc5e4ec5da628f98de94d1ac8ab21b74efa25b7a7a56f7f0b0fcb355886cb435\"" Jul 15 11:52:13.590544 systemd[1]: Started cri-containerd-bc5e4ec5da628f98de94d1ac8ab21b74efa25b7a7a56f7f0b0fcb355886cb435.scope. Jul 15 11:52:13.613580 kernel: kauditd_printk_skb: 91 callbacks suppressed Jul 15 11:52:13.613671 kernel: audit: type=1400 audit(1752580333.605:1009): avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.613693 kernel: audit: type=1300 audit(1752580333.605:1009): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f39d6587988 items=0 ppid=2537 pid=2817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:13.605000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.605000 audit[2817]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f39d6587988 items=0 ppid=2537 pid=2817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:13.624842 kernel: audit: type=1327 audit(1752580333.605:1009): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263356534656335646136323866393864653934643161633861623231 Jul 15 11:52:13.624880 kernel: audit: type=1400 audit(1752580333.606:1010): avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.624898 kernel: audit: type=1400 audit(1752580333.606:1010): avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.605000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263356534656335646136323866393864653934643161633861623231 Jul 15 11:52:13.638591 kernel: audit: type=1400 audit(1752580333.606:1010): avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.638632 kernel: audit: type=1400 audit(1752580333.606:1010): avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.638648 kernel: audit: type=1400 audit(1752580333.606:1010): avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.638662 kernel: audit: type=1400 audit(1752580333.606:1010): avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.606000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.606000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.606000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.606000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.606000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.606000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.606000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.643432 kernel: audit: type=1400 audit(1752580333.606:1010): avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.606000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.606000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.606000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.606000 audit: BPF prog-id=133 op=LOAD Jul 15 11:52:13.606000 audit[2817]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0000dbd58 items=0 ppid=2537 pid=2817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:13.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263356534656335646136323866393864653934643161633861623231 Jul 15 11:52:13.608000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.608000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.608000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.608000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.608000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.608000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.608000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.608000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.608000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.608000 audit: BPF prog-id=134 op=LOAD Jul 15 11:52:13.608000 audit[2817]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0000dbda8 items=0 ppid=2537 pid=2817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:13.608000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263356534656335646136323866393864653934643161633861623231 Jul 15 11:52:13.612000 audit: BPF prog-id=134 op=UNLOAD Jul 15 11:52:13.612000 audit: BPF prog-id=133 op=UNLOAD Jul 15 11:52:13.612000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.612000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.612000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.612000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.612000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.612000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.612000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.612000 audit[2817]: AVC avc: denied { perfmon } for pid=2817 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.612000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.612000 audit[2817]: AVC avc: denied { bpf } for pid=2817 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:13.612000 audit: BPF prog-id=135 op=LOAD Jul 15 11:52:13.612000 audit[2817]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0000dbe38 items=0 ppid=2537 pid=2817 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:13.612000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6263356534656335646136323866393864653934643161633861623231 Jul 15 11:52:13.644405 env[1245]: time="2025-07-15T11:52:13.644382800Z" level=info msg="StartContainer for \"bc5e4ec5da628f98de94d1ac8ab21b74efa25b7a7a56f7f0b0fcb355886cb435\" returns successfully" Jul 15 11:52:13.954962 kubelet[2102]: I0715 11:52:13.954936 2102 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:52:14.230000 audit[2841]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2841 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:14.230000 audit[2841]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc59855070 a2=0 a3=7ffc5985505c items=0 ppid=2205 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:14.230000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:14.235000 audit[2841]: NETFILTER_CFG table=nat:98 family=2 entries=19 op=nft_register_chain pid=2841 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:14.235000 audit[2841]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffc59855070 a2=0 a3=7ffc5985505c items=0 ppid=2205 pid=2841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:14.235000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:14.556016 systemd[1]: run-containerd-runc-k8s.io-bc5e4ec5da628f98de94d1ac8ab21b74efa25b7a7a56f7f0b0fcb355886cb435-runc.CQgBd9.mount: Deactivated successfully. Jul 15 11:52:14.784852 kubelet[2102]: E0715 11:52:14.784651 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-n9wvp" podUID="ce316714-6e1f-490d-9366-973c600e9360" Jul 15 11:52:16.052045 env[1245]: time="2025-07-15T11:52:16.051962982Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:52:16.055033 systemd[1]: cri-containerd-bc5e4ec5da628f98de94d1ac8ab21b74efa25b7a7a56f7f0b0fcb355886cb435.scope: Deactivated successfully. Jul 15 11:52:16.056000 audit: BPF prog-id=135 op=UNLOAD Jul 15 11:52:16.067967 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-bc5e4ec5da628f98de94d1ac8ab21b74efa25b7a7a56f7f0b0fcb355886cb435-rootfs.mount: Deactivated successfully. Jul 15 11:52:16.074139 env[1245]: time="2025-07-15T11:52:16.074111219Z" level=info msg="shim disconnected" id=bc5e4ec5da628f98de94d1ac8ab21b74efa25b7a7a56f7f0b0fcb355886cb435 Jul 15 11:52:16.074234 env[1245]: time="2025-07-15T11:52:16.074138971Z" level=warning msg="cleaning up after shim disconnected" id=bc5e4ec5da628f98de94d1ac8ab21b74efa25b7a7a56f7f0b0fcb355886cb435 namespace=k8s.io Jul 15 11:52:16.074234 env[1245]: time="2025-07-15T11:52:16.074145572Z" level=info msg="cleaning up dead shim" Jul 15 11:52:16.078732 env[1245]: time="2025-07-15T11:52:16.078710626Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:52:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2858 runtime=io.containerd.runc.v2\n" Jul 15 11:52:16.092030 kubelet[2102]: I0715 11:52:16.089660 2102 kubelet_node_status.go:488] "Fast updating node status as it just became ready" Jul 15 11:52:16.230288 systemd[1]: Created slice kubepods-besteffort-pod1b0b115b_c4c6_4d3f_942e_84cda13fa272.slice. Jul 15 11:52:16.232761 systemd[1]: Created slice kubepods-besteffort-pod12ff45d2_4237_4a75_a49b_5d1934e0deb7.slice. Jul 15 11:52:16.240709 systemd[1]: Created slice kubepods-besteffort-pod351db5f6_d720_4547_9262_3197283adaee.slice. Jul 15 11:52:16.243281 kubelet[2102]: I0715 11:52:16.243263 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/84c60641-bf5d-4300-a575-76fcec4a7ca4-goldmane-ca-bundle\") pod \"goldmane-58fd7646b9-v6rqg\" (UID: \"84c60641-bf5d-4300-a575-76fcec4a7ca4\") " pod="calico-system/goldmane-58fd7646b9-v6rqg" Jul 15 11:52:16.243343 kubelet[2102]: I0715 11:52:16.243289 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1b0b115b-c4c6-4d3f-942e-84cda13fa272-calico-apiserver-certs\") pod \"calico-apiserver-759464fdbd-8t76s\" (UID: \"1b0b115b-c4c6-4d3f-942e-84cda13fa272\") " pod="calico-apiserver/calico-apiserver-759464fdbd-8t76s" Jul 15 11:52:16.243343 kubelet[2102]: I0715 11:52:16.243301 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v7zg5\" (UniqueName: \"kubernetes.io/projected/351db5f6-d720-4547-9262-3197283adaee-kube-api-access-v7zg5\") pod \"whisker-74b678ff6c-bhdg7\" (UID: \"351db5f6-d720-4547-9262-3197283adaee\") " pod="calico-system/whisker-74b678ff6c-bhdg7" Jul 15 11:52:16.243343 kubelet[2102]: I0715 11:52:16.243325 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bqzc6\" (UniqueName: \"kubernetes.io/projected/120c9d9a-979f-4c42-8753-ad82a94c699a-kube-api-access-bqzc6\") pod \"calico-kube-controllers-6cdcfb8994-hqlqp\" (UID: \"120c9d9a-979f-4c42-8753-ad82a94c699a\") " pod="calico-system/calico-kube-controllers-6cdcfb8994-hqlqp" Jul 15 11:52:16.243343 kubelet[2102]: I0715 11:52:16.243335 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/351db5f6-d720-4547-9262-3197283adaee-whisker-backend-key-pair\") pod \"whisker-74b678ff6c-bhdg7\" (UID: \"351db5f6-d720-4547-9262-3197283adaee\") " pod="calico-system/whisker-74b678ff6c-bhdg7" Jul 15 11:52:16.243429 kubelet[2102]: I0715 11:52:16.243351 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8xmdb\" (UniqueName: \"kubernetes.io/projected/84c60641-bf5d-4300-a575-76fcec4a7ca4-kube-api-access-8xmdb\") pod \"goldmane-58fd7646b9-v6rqg\" (UID: \"84c60641-bf5d-4300-a575-76fcec4a7ca4\") " pod="calico-system/goldmane-58fd7646b9-v6rqg" Jul 15 11:52:16.243429 kubelet[2102]: I0715 11:52:16.243360 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/19fff0c9-96cf-4668-96d3-25fbced73cfb-config-volume\") pod \"coredns-7c65d6cfc9-jcf2z\" (UID: \"19fff0c9-96cf-4668-96d3-25fbced73cfb\") " pod="kube-system/coredns-7c65d6cfc9-jcf2z" Jul 15 11:52:16.243429 kubelet[2102]: I0715 11:52:16.243371 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-rbbwb\" (UniqueName: \"kubernetes.io/projected/19fff0c9-96cf-4668-96d3-25fbced73cfb-kube-api-access-rbbwb\") pod \"coredns-7c65d6cfc9-jcf2z\" (UID: \"19fff0c9-96cf-4668-96d3-25fbced73cfb\") " pod="kube-system/coredns-7c65d6cfc9-jcf2z" Jul 15 11:52:16.243429 kubelet[2102]: I0715 11:52:16.243380 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mhsjx\" (UniqueName: \"kubernetes.io/projected/3a284661-8d5c-4ec1-96bf-0c0515e97469-kube-api-access-mhsjx\") pod \"coredns-7c65d6cfc9-8mq62\" (UID: \"3a284661-8d5c-4ec1-96bf-0c0515e97469\") " pod="kube-system/coredns-7c65d6cfc9-8mq62" Jul 15 11:52:16.243429 kubelet[2102]: I0715 11:52:16.243390 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/84c60641-bf5d-4300-a575-76fcec4a7ca4-config\") pod \"goldmane-58fd7646b9-v6rqg\" (UID: \"84c60641-bf5d-4300-a575-76fcec4a7ca4\") " pod="calico-system/goldmane-58fd7646b9-v6rqg" Jul 15 11:52:16.244313 kubelet[2102]: I0715 11:52:16.243401 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8lrjv\" (UniqueName: \"kubernetes.io/projected/1b0b115b-c4c6-4d3f-942e-84cda13fa272-kube-api-access-8lrjv\") pod \"calico-apiserver-759464fdbd-8t76s\" (UID: \"1b0b115b-c4c6-4d3f-942e-84cda13fa272\") " pod="calico-apiserver/calico-apiserver-759464fdbd-8t76s" Jul 15 11:52:16.244313 kubelet[2102]: I0715 11:52:16.243410 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/12ff45d2-4237-4a75-a49b-5d1934e0deb7-calico-apiserver-certs\") pod \"calico-apiserver-759464fdbd-cvd46\" (UID: \"12ff45d2-4237-4a75-a49b-5d1934e0deb7\") " pod="calico-apiserver/calico-apiserver-759464fdbd-cvd46" Jul 15 11:52:16.244313 kubelet[2102]: I0715 11:52:16.243420 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/351db5f6-d720-4547-9262-3197283adaee-whisker-ca-bundle\") pod \"whisker-74b678ff6c-bhdg7\" (UID: \"351db5f6-d720-4547-9262-3197283adaee\") " pod="calico-system/whisker-74b678ff6c-bhdg7" Jul 15 11:52:16.244313 kubelet[2102]: I0715 11:52:16.243428 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/84c60641-bf5d-4300-a575-76fcec4a7ca4-goldmane-key-pair\") pod \"goldmane-58fd7646b9-v6rqg\" (UID: \"84c60641-bf5d-4300-a575-76fcec4a7ca4\") " pod="calico-system/goldmane-58fd7646b9-v6rqg" Jul 15 11:52:16.244313 kubelet[2102]: I0715 11:52:16.243524 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-v8pwz\" (UniqueName: \"kubernetes.io/projected/12ff45d2-4237-4a75-a49b-5d1934e0deb7-kube-api-access-v8pwz\") pod \"calico-apiserver-759464fdbd-cvd46\" (UID: \"12ff45d2-4237-4a75-a49b-5d1934e0deb7\") " pod="calico-apiserver/calico-apiserver-759464fdbd-cvd46" Jul 15 11:52:16.244490 kubelet[2102]: I0715 11:52:16.243541 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-kp2h2\" (UniqueName: \"kubernetes.io/projected/deaa84fe-93ef-419a-b53c-7053a343ff7c-kube-api-access-kp2h2\") pod \"calico-apiserver-cd64889bb-t28g6\" (UID: \"deaa84fe-93ef-419a-b53c-7053a343ff7c\") " pod="calico-apiserver/calico-apiserver-cd64889bb-t28g6" Jul 15 11:52:16.244490 kubelet[2102]: I0715 11:52:16.243552 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/3a284661-8d5c-4ec1-96bf-0c0515e97469-config-volume\") pod \"coredns-7c65d6cfc9-8mq62\" (UID: \"3a284661-8d5c-4ec1-96bf-0c0515e97469\") " pod="kube-system/coredns-7c65d6cfc9-8mq62" Jul 15 11:52:16.244490 kubelet[2102]: I0715 11:52:16.243563 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/120c9d9a-979f-4c42-8753-ad82a94c699a-tigera-ca-bundle\") pod \"calico-kube-controllers-6cdcfb8994-hqlqp\" (UID: \"120c9d9a-979f-4c42-8753-ad82a94c699a\") " pod="calico-system/calico-kube-controllers-6cdcfb8994-hqlqp" Jul 15 11:52:16.244490 kubelet[2102]: I0715 11:52:16.243578 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/deaa84fe-93ef-419a-b53c-7053a343ff7c-calico-apiserver-certs\") pod \"calico-apiserver-cd64889bb-t28g6\" (UID: \"deaa84fe-93ef-419a-b53c-7053a343ff7c\") " pod="calico-apiserver/calico-apiserver-cd64889bb-t28g6" Jul 15 11:52:16.249108 systemd[1]: Created slice kubepods-besteffort-poddeaa84fe_93ef_419a_b53c_7053a343ff7c.slice. Jul 15 11:52:16.255040 systemd[1]: Created slice kubepods-besteffort-pod84c60641_bf5d_4300_a575_76fcec4a7ca4.slice. Jul 15 11:52:16.259893 systemd[1]: Created slice kubepods-burstable-pod3a284661_8d5c_4ec1_96bf_0c0515e97469.slice. Jul 15 11:52:16.265070 systemd[1]: Created slice kubepods-burstable-pod19fff0c9_96cf_4668_96d3_25fbced73cfb.slice. Jul 15 11:52:16.268389 systemd[1]: Created slice kubepods-besteffort-pod120c9d9a_979f_4c42_8753_ad82a94c699a.slice. Jul 15 11:52:16.541474 env[1245]: time="2025-07-15T11:52:16.541261939Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-759464fdbd-cvd46,Uid:12ff45d2-4237-4a75-a49b-5d1934e0deb7,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:52:16.543972 env[1245]: time="2025-07-15T11:52:16.543952562Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-759464fdbd-8t76s,Uid:1b0b115b-c4c6-4d3f-942e-84cda13fa272,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:52:16.551497 env[1245]: time="2025-07-15T11:52:16.551478953Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-74b678ff6c-bhdg7,Uid:351db5f6-d720-4547-9262-3197283adaee,Namespace:calico-system,Attempt:0,}" Jul 15 11:52:16.551658 env[1245]: time="2025-07-15T11:52:16.551639643Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cd64889bb-t28g6,Uid:deaa84fe-93ef-419a-b53c-7053a343ff7c,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:52:16.558182 env[1245]: time="2025-07-15T11:52:16.558161081Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-v6rqg,Uid:84c60641-bf5d-4300-a575-76fcec4a7ca4,Namespace:calico-system,Attempt:0,}" Jul 15 11:52:16.564552 env[1245]: time="2025-07-15T11:52:16.564526941Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-8mq62,Uid:3a284661-8d5c-4ec1-96bf-0c0515e97469,Namespace:kube-system,Attempt:0,}" Jul 15 11:52:16.569174 env[1245]: time="2025-07-15T11:52:16.569070997Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jcf2z,Uid:19fff0c9-96cf-4668-96d3-25fbced73cfb,Namespace:kube-system,Attempt:0,}" Jul 15 11:52:16.570525 env[1245]: time="2025-07-15T11:52:16.570511513Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6cdcfb8994-hqlqp,Uid:120c9d9a-979f-4c42-8753-ad82a94c699a,Namespace:calico-system,Attempt:0,}" Jul 15 11:52:16.788003 systemd[1]: Created slice kubepods-besteffort-podce316714_6e1f_490d_9366_973c600e9360.slice. Jul 15 11:52:16.789916 env[1245]: time="2025-07-15T11:52:16.789546597Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n9wvp,Uid:ce316714-6e1f-490d-9366-973c600e9360,Namespace:calico-system,Attempt:0,}" Jul 15 11:52:16.868498 env[1245]: time="2025-07-15T11:52:16.867333348Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 15 11:52:16.962142 env[1245]: time="2025-07-15T11:52:16.962083050Z" level=error msg="Failed to destroy network for sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.962523 env[1245]: time="2025-07-15T11:52:16.962503830Z" level=error msg="encountered an error cleaning up failed sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.962625 env[1245]: time="2025-07-15T11:52:16.962606138Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6cdcfb8994-hqlqp,Uid:120c9d9a-979f-4c42-8753-ad82a94c699a,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.966155 kubelet[2102]: E0715 11:52:16.966120 2102 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.969362 kubelet[2102]: E0715 11:52:16.969333 2102 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6cdcfb8994-hqlqp" Jul 15 11:52:16.969443 kubelet[2102]: E0715 11:52:16.969368 2102 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-6cdcfb8994-hqlqp" Jul 15 11:52:16.969443 kubelet[2102]: E0715 11:52:16.969403 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-6cdcfb8994-hqlqp_calico-system(120c9d9a-979f-4c42-8753-ad82a94c699a)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-6cdcfb8994-hqlqp_calico-system(120c9d9a-979f-4c42-8753-ad82a94c699a)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6cdcfb8994-hqlqp" podUID="120c9d9a-979f-4c42-8753-ad82a94c699a" Jul 15 11:52:16.984475 env[1245]: time="2025-07-15T11:52:16.984421880Z" level=error msg="Failed to destroy network for sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.984822 env[1245]: time="2025-07-15T11:52:16.984802736Z" level=error msg="encountered an error cleaning up failed sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.984910 env[1245]: time="2025-07-15T11:52:16.984892035Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jcf2z,Uid:19fff0c9-96cf-4668-96d3-25fbced73cfb,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.985138 kubelet[2102]: E0715 11:52:16.985102 2102 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.985184 kubelet[2102]: E0715 11:52:16.985147 2102 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-jcf2z" Jul 15 11:52:16.985184 kubelet[2102]: E0715 11:52:16.985160 2102 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-jcf2z" Jul 15 11:52:16.985230 kubelet[2102]: E0715 11:52:16.985197 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-jcf2z_kube-system(19fff0c9-96cf-4668-96d3-25fbced73cfb)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-jcf2z_kube-system(19fff0c9-96cf-4668-96d3-25fbced73cfb)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-jcf2z" podUID="19fff0c9-96cf-4668-96d3-25fbced73cfb" Jul 15 11:52:16.996913 env[1245]: time="2025-07-15T11:52:16.996875671Z" level=error msg="Failed to destroy network for sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.997283 env[1245]: time="2025-07-15T11:52:16.997257291Z" level=error msg="encountered an error cleaning up failed sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.997374 env[1245]: time="2025-07-15T11:52:16.997352830Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-759464fdbd-8t76s,Uid:1b0b115b-c4c6-4d3f-942e-84cda13fa272,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.997643 kubelet[2102]: E0715 11:52:16.997619 2102 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:16.997700 kubelet[2102]: E0715 11:52:16.997663 2102 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-759464fdbd-8t76s" Jul 15 11:52:16.997700 kubelet[2102]: E0715 11:52:16.997676 2102 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-759464fdbd-8t76s" Jul 15 11:52:16.997751 kubelet[2102]: E0715 11:52:16.997699 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-759464fdbd-8t76s_calico-apiserver(1b0b115b-c4c6-4d3f-942e-84cda13fa272)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-759464fdbd-8t76s_calico-apiserver(1b0b115b-c4c6-4d3f-942e-84cda13fa272)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-759464fdbd-8t76s" podUID="1b0b115b-c4c6-4d3f-942e-84cda13fa272" Jul 15 11:52:17.007375 env[1245]: time="2025-07-15T11:52:17.007338252Z" level=error msg="Failed to destroy network for sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.007730 env[1245]: time="2025-07-15T11:52:17.007709552Z" level=error msg="encountered an error cleaning up failed sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.007823 env[1245]: time="2025-07-15T11:52:17.007806136Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cd64889bb-t28g6,Uid:deaa84fe-93ef-419a-b53c-7053a343ff7c,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.008062 kubelet[2102]: E0715 11:52:17.008022 2102 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.008114 kubelet[2102]: E0715 11:52:17.008076 2102 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-cd64889bb-t28g6" Jul 15 11:52:17.008114 kubelet[2102]: E0715 11:52:17.008090 2102 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-cd64889bb-t28g6" Jul 15 11:52:17.008167 kubelet[2102]: E0715 11:52:17.008130 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-cd64889bb-t28g6_calico-apiserver(deaa84fe-93ef-419a-b53c-7053a343ff7c)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-cd64889bb-t28g6_calico-apiserver(deaa84fe-93ef-419a-b53c-7053a343ff7c)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-cd64889bb-t28g6" podUID="deaa84fe-93ef-419a-b53c-7053a343ff7c" Jul 15 11:52:17.009225 kubelet[2102]: E0715 11:52:17.009076 2102 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.009225 kubelet[2102]: E0715 11:52:17.009104 2102 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-v6rqg" Jul 15 11:52:17.009225 kubelet[2102]: E0715 11:52:17.009118 2102 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-58fd7646b9-v6rqg" Jul 15 11:52:17.009329 env[1245]: time="2025-07-15T11:52:17.008361606Z" level=error msg="Failed to destroy network for sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.009329 env[1245]: time="2025-07-15T11:52:17.008618411Z" level=error msg="encountered an error cleaning up failed sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.009329 env[1245]: time="2025-07-15T11:52:17.008644286Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-v6rqg,Uid:84c60641-bf5d-4300-a575-76fcec4a7ca4,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.009410 kubelet[2102]: E0715 11:52:17.009137 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-58fd7646b9-v6rqg_calico-system(84c60641-bf5d-4300-a575-76fcec4a7ca4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-58fd7646b9-v6rqg_calico-system(84c60641-bf5d-4300-a575-76fcec4a7ca4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-v6rqg" podUID="84c60641-bf5d-4300-a575-76fcec4a7ca4" Jul 15 11:52:17.014478 env[1245]: time="2025-07-15T11:52:17.014421479Z" level=error msg="Failed to destroy network for sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.015994 env[1245]: time="2025-07-15T11:52:17.014664296Z" level=error msg="encountered an error cleaning up failed sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.015994 env[1245]: time="2025-07-15T11:52:17.014696792Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n9wvp,Uid:ce316714-6e1f-490d-9366-973c600e9360,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.015994 env[1245]: time="2025-07-15T11:52:17.015815247Z" level=error msg="Failed to destroy network for sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.016082 kubelet[2102]: E0715 11:52:17.014832 2102 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.016082 kubelet[2102]: E0715 11:52:17.014870 2102 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-n9wvp" Jul 15 11:52:17.016082 kubelet[2102]: E0715 11:52:17.014885 2102 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-n9wvp" Jul 15 11:52:17.016155 kubelet[2102]: E0715 11:52:17.014914 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-n9wvp_calico-system(ce316714-6e1f-490d-9366-973c600e9360)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-n9wvp_calico-system(ce316714-6e1f-490d-9366-973c600e9360)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-n9wvp" podUID="ce316714-6e1f-490d-9366-973c600e9360" Jul 15 11:52:17.016690 env[1245]: time="2025-07-15T11:52:17.016669850Z" level=error msg="encountered an error cleaning up failed sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.017740 env[1245]: time="2025-07-15T11:52:17.016776806Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-8mq62,Uid:3a284661-8d5c-4ec1-96bf-0c0515e97469,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.017784 kubelet[2102]: E0715 11:52:17.016893 2102 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.017784 kubelet[2102]: E0715 11:52:17.016917 2102 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-8mq62" Jul 15 11:52:17.017784 kubelet[2102]: E0715 11:52:17.016929 2102 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-7c65d6cfc9-8mq62" Jul 15 11:52:17.017908 kubelet[2102]: E0715 11:52:17.016966 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-7c65d6cfc9-8mq62_kube-system(3a284661-8d5c-4ec1-96bf-0c0515e97469)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-7c65d6cfc9-8mq62_kube-system(3a284661-8d5c-4ec1-96bf-0c0515e97469)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-8mq62" podUID="3a284661-8d5c-4ec1-96bf-0c0515e97469" Jul 15 11:52:17.020063 env[1245]: time="2025-07-15T11:52:17.020027864Z" level=error msg="Failed to destroy network for sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.020301 env[1245]: time="2025-07-15T11:52:17.020279572Z" level=error msg="encountered an error cleaning up failed sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.020333 env[1245]: time="2025-07-15T11:52:17.020315289Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-74b678ff6c-bhdg7,Uid:351db5f6-d720-4547-9262-3197283adaee,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.020483 kubelet[2102]: E0715 11:52:17.020458 2102 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.020525 kubelet[2102]: E0715 11:52:17.020493 2102 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-74b678ff6c-bhdg7" Jul 15 11:52:17.020525 kubelet[2102]: E0715 11:52:17.020506 2102 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-74b678ff6c-bhdg7" Jul 15 11:52:17.020571 kubelet[2102]: E0715 11:52:17.020539 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-74b678ff6c-bhdg7_calico-system(351db5f6-d720-4547-9262-3197283adaee)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-74b678ff6c-bhdg7_calico-system(351db5f6-d720-4547-9262-3197283adaee)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-74b678ff6c-bhdg7" podUID="351db5f6-d720-4547-9262-3197283adaee" Jul 15 11:52:17.029274 env[1245]: time="2025-07-15T11:52:17.029230238Z" level=error msg="Failed to destroy network for sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.029505 env[1245]: time="2025-07-15T11:52:17.029481882Z" level=error msg="encountered an error cleaning up failed sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.030670 env[1245]: time="2025-07-15T11:52:17.029517939Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-759464fdbd-cvd46,Uid:12ff45d2-4237-4a75-a49b-5d1934e0deb7,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.030737 kubelet[2102]: E0715 11:52:17.029664 2102 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.030737 kubelet[2102]: E0715 11:52:17.029709 2102 kuberuntime_sandbox.go:72] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-759464fdbd-cvd46" Jul 15 11:52:17.030737 kubelet[2102]: E0715 11:52:17.029723 2102 kuberuntime_manager.go:1170] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-759464fdbd-cvd46" Jul 15 11:52:17.030812 kubelet[2102]: E0715 11:52:17.029755 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-759464fdbd-cvd46_calico-apiserver(12ff45d2-4237-4a75-a49b-5d1934e0deb7)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-759464fdbd-cvd46_calico-apiserver(12ff45d2-4237-4a75-a49b-5d1934e0deb7)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-759464fdbd-cvd46" podUID="12ff45d2-4237-4a75-a49b-5d1934e0deb7" Jul 15 11:52:17.868760 kubelet[2102]: I0715 11:52:17.868736 2102 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:52:17.872855 kubelet[2102]: I0715 11:52:17.869632 2102 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:52:17.875782 kubelet[2102]: I0715 11:52:17.875730 2102 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:52:17.876426 kubelet[2102]: I0715 11:52:17.876414 2102 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:52:17.877028 kubelet[2102]: I0715 11:52:17.877013 2102 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:52:17.880331 kubelet[2102]: I0715 11:52:17.880314 2102 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:52:17.882841 kubelet[2102]: I0715 11:52:17.882818 2102 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:52:17.885275 env[1245]: time="2025-07-15T11:52:17.884603368Z" level=info msg="StopPodSandbox for \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\"" Jul 15 11:52:17.885275 env[1245]: time="2025-07-15T11:52:17.885064864Z" level=info msg="StopPodSandbox for \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\"" Jul 15 11:52:17.886948 kubelet[2102]: I0715 11:52:17.886211 2102 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:52:17.887042 env[1245]: time="2025-07-15T11:52:17.886681658Z" level=info msg="StopPodSandbox for \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\"" Jul 15 11:52:17.887042 env[1245]: time="2025-07-15T11:52:17.886864435Z" level=info msg="StopPodSandbox for \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\"" Jul 15 11:52:17.887042 env[1245]: time="2025-07-15T11:52:17.887025177Z" level=info msg="StopPodSandbox for \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\"" Jul 15 11:52:17.887310 env[1245]: time="2025-07-15T11:52:17.887290706Z" level=info msg="StopPodSandbox for \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\"" Jul 15 11:52:17.887543 env[1245]: time="2025-07-15T11:52:17.887483588Z" level=info msg="StopPodSandbox for \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\"" Jul 15 11:52:17.888978 env[1245]: time="2025-07-15T11:52:17.888427243Z" level=info msg="StopPodSandbox for \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\"" Jul 15 11:52:17.891399 kubelet[2102]: I0715 11:52:17.891376 2102 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:52:17.892157 env[1245]: time="2025-07-15T11:52:17.892107860Z" level=info msg="StopPodSandbox for \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\"" Jul 15 11:52:17.935874 env[1245]: time="2025-07-15T11:52:17.935809204Z" level=error msg="StopPodSandbox for \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\" failed" error="failed to destroy network for sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.952725 kubelet[2102]: E0715 11:52:17.952693 2102 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:52:17.952862 kubelet[2102]: E0715 11:52:17.952731 2102 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98"} Jul 15 11:52:17.952862 kubelet[2102]: E0715 11:52:17.952790 2102 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"deaa84fe-93ef-419a-b53c-7053a343ff7c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:52:17.952862 kubelet[2102]: E0715 11:52:17.952807 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"deaa84fe-93ef-419a-b53c-7053a343ff7c\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-cd64889bb-t28g6" podUID="deaa84fe-93ef-419a-b53c-7053a343ff7c" Jul 15 11:52:17.967583 env[1245]: time="2025-07-15T11:52:17.967491929Z" level=error msg="StopPodSandbox for \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\" failed" error="failed to destroy network for sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.970368 env[1245]: time="2025-07-15T11:52:17.970332725Z" level=error msg="StopPodSandbox for \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\" failed" error="failed to destroy network for sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.970703 kubelet[2102]: E0715 11:52:17.970599 2102 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:52:17.970703 kubelet[2102]: E0715 11:52:17.970598 2102 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:52:17.970703 kubelet[2102]: E0715 11:52:17.970635 2102 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a"} Jul 15 11:52:17.970703 kubelet[2102]: E0715 11:52:17.970637 2102 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68"} Jul 15 11:52:17.970866 kubelet[2102]: E0715 11:52:17.970732 2102 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"120c9d9a-979f-4c42-8753-ad82a94c699a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:52:17.970866 kubelet[2102]: E0715 11:52:17.970749 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"120c9d9a-979f-4c42-8753-ad82a94c699a\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-6cdcfb8994-hqlqp" podUID="120c9d9a-979f-4c42-8753-ad82a94c699a" Jul 15 11:52:17.973890 kubelet[2102]: E0715 11:52:17.970666 2102 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"84c60641-bf5d-4300-a575-76fcec4a7ca4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:52:17.973890 kubelet[2102]: E0715 11:52:17.973514 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"84c60641-bf5d-4300-a575-76fcec4a7ca4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-58fd7646b9-v6rqg" podUID="84c60641-bf5d-4300-a575-76fcec4a7ca4" Jul 15 11:52:17.989494 env[1245]: time="2025-07-15T11:52:17.989454373Z" level=error msg="StopPodSandbox for \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\" failed" error="failed to destroy network for sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.989666 kubelet[2102]: E0715 11:52:17.989629 2102 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:52:17.989726 kubelet[2102]: E0715 11:52:17.989666 2102 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f"} Jul 15 11:52:17.989726 kubelet[2102]: E0715 11:52:17.989688 2102 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"ce316714-6e1f-490d-9366-973c600e9360\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:52:17.989726 kubelet[2102]: E0715 11:52:17.989713 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"ce316714-6e1f-490d-9366-973c600e9360\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-n9wvp" podUID="ce316714-6e1f-490d-9366-973c600e9360" Jul 15 11:52:17.989887 env[1245]: time="2025-07-15T11:52:17.989867942Z" level=error msg="StopPodSandbox for \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\" failed" error="failed to destroy network for sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:17.990024 kubelet[2102]: E0715 11:52:17.990005 2102 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:52:17.990073 kubelet[2102]: E0715 11:52:17.990025 2102 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac"} Jul 15 11:52:17.990073 kubelet[2102]: E0715 11:52:17.990037 2102 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"351db5f6-d720-4547-9262-3197283adaee\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:52:17.990073 kubelet[2102]: E0715 11:52:17.990049 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"351db5f6-d720-4547-9262-3197283adaee\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-74b678ff6c-bhdg7" podUID="351db5f6-d720-4547-9262-3197283adaee" Jul 15 11:52:17.999996 env[1245]: time="2025-07-15T11:52:17.999944830Z" level=error msg="StopPodSandbox for \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\" failed" error="failed to destroy network for sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:18.000145 kubelet[2102]: E0715 11:52:18.000112 2102 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:52:18.000190 kubelet[2102]: E0715 11:52:18.000154 2102 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917"} Jul 15 11:52:18.000190 kubelet[2102]: E0715 11:52:18.000176 2102 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3a284661-8d5c-4ec1-96bf-0c0515e97469\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:52:18.000277 kubelet[2102]: E0715 11:52:18.000190 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3a284661-8d5c-4ec1-96bf-0c0515e97469\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-8mq62" podUID="3a284661-8d5c-4ec1-96bf-0c0515e97469" Jul 15 11:52:18.005375 env[1245]: time="2025-07-15T11:52:18.005337849Z" level=error msg="StopPodSandbox for \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\" failed" error="failed to destroy network for sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:18.005558 kubelet[2102]: E0715 11:52:18.005531 2102 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:52:18.005599 kubelet[2102]: E0715 11:52:18.005572 2102 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117"} Jul 15 11:52:18.005599 kubelet[2102]: E0715 11:52:18.005595 2102 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"19fff0c9-96cf-4668-96d3-25fbced73cfb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:52:18.005690 kubelet[2102]: E0715 11:52:18.005609 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"19fff0c9-96cf-4668-96d3-25fbced73cfb\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-7c65d6cfc9-jcf2z" podUID="19fff0c9-96cf-4668-96d3-25fbced73cfb" Jul 15 11:52:18.006119 env[1245]: time="2025-07-15T11:52:18.006091979Z" level=error msg="StopPodSandbox for \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\" failed" error="failed to destroy network for sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:18.006320 kubelet[2102]: E0715 11:52:18.006244 2102 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:52:18.006320 kubelet[2102]: E0715 11:52:18.006268 2102 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306"} Jul 15 11:52:18.006320 kubelet[2102]: E0715 11:52:18.006293 2102 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"12ff45d2-4237-4a75-a49b-5d1934e0deb7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:52:18.006320 kubelet[2102]: E0715 11:52:18.006306 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"12ff45d2-4237-4a75-a49b-5d1934e0deb7\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-759464fdbd-cvd46" podUID="12ff45d2-4237-4a75-a49b-5d1934e0deb7" Jul 15 11:52:18.012848 env[1245]: time="2025-07-15T11:52:18.012722715Z" level=error msg="StopPodSandbox for \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\" failed" error="failed to destroy network for sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:52:18.013717 kubelet[2102]: E0715 11:52:18.013220 2102 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:52:18.013717 kubelet[2102]: E0715 11:52:18.013262 2102 kuberuntime_manager.go:1479] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07"} Jul 15 11:52:18.013717 kubelet[2102]: E0715 11:52:18.013282 2102 kuberuntime_manager.go:1079] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"1b0b115b-c4c6-4d3f-942e-84cda13fa272\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:52:18.013717 kubelet[2102]: E0715 11:52:18.013299 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"1b0b115b-c4c6-4d3f-942e-84cda13fa272\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-759464fdbd-8t76s" podUID="1b0b115b-c4c6-4d3f-942e-84cda13fa272" Jul 15 11:52:23.990014 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3337958269.mount: Deactivated successfully. Jul 15 11:52:24.042504 env[1245]: time="2025-07-15T11:52:24.042430412Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:24.049263 env[1245]: time="2025-07-15T11:52:24.049238853Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:24.051421 env[1245]: time="2025-07-15T11:52:24.051402170Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:24.053108 env[1245]: time="2025-07-15T11:52:24.053087436Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:24.053493 env[1245]: time="2025-07-15T11:52:24.053467322Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 15 11:52:24.118287 env[1245]: time="2025-07-15T11:52:24.118253013Z" level=info msg="CreateContainer within sandbox \"ac1fe766a59e1ed7a8f6c6c670ef3a019d58786c02a7aa6da8b8b76bce8b77a1\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 15 11:52:24.132011 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3558969890.mount: Deactivated successfully. Jul 15 11:52:24.134547 env[1245]: time="2025-07-15T11:52:24.134522384Z" level=info msg="CreateContainer within sandbox \"ac1fe766a59e1ed7a8f6c6c670ef3a019d58786c02a7aa6da8b8b76bce8b77a1\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"0f8cf81b4443ff4e4b04da06fa8fb312ef9aaff5de4b55768e573e1d3b6c789c\"" Jul 15 11:52:24.137458 env[1245]: time="2025-07-15T11:52:24.135678405Z" level=info msg="StartContainer for \"0f8cf81b4443ff4e4b04da06fa8fb312ef9aaff5de4b55768e573e1d3b6c789c\"" Jul 15 11:52:24.152546 systemd[1]: Started cri-containerd-0f8cf81b4443ff4e4b04da06fa8fb312ef9aaff5de4b55768e573e1d3b6c789c.scope. Jul 15 11:52:24.173595 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 15 11:52:24.173692 kernel: audit: type=1400 audit(1752580344.165:1018): avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.173737 kernel: audit: type=1300 audit(1752580344.165:1018): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00013f6b0 a2=3c a3=7f46a5ade778 items=0 ppid=2537 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:24.165000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.189688 kernel: audit: type=1327 audit(1752580344.165:1018): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066386366383162343434336666346534623034646130366661386662 Jul 15 11:52:24.189738 kernel: audit: type=1400 audit(1752580344.166:1019): avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.191337 kernel: audit: type=1400 audit(1752580344.166:1019): avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.191361 kernel: audit: type=1400 audit(1752580344.166:1019): avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.191378 kernel: audit: type=1400 audit(1752580344.166:1019): avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.165000 audit[3286]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00013f6b0 a2=3c a3=7f46a5ade778 items=0 ppid=2537 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:24.200424 kernel: audit: type=1400 audit(1752580344.166:1019): avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.200481 kernel: audit: type=1400 audit(1752580344.166:1019): avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.165000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066386366383162343434336666346534623034646130366661386662 Jul 15 11:52:24.166000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.166000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.166000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.166000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.166000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.166000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.166000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.166000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.166000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.166000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.166000 audit: BPF prog-id=136 op=LOAD Jul 15 11:52:24.166000 audit[3286]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00013f9d8 a2=78 a3=c0003b20c8 items=0 ppid=2537 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:24.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066386366383162343434336666346534623034646130366661386662 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit: BPF prog-id=137 op=LOAD Jul 15 11:52:24.172000 audit[3286]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00013f770 a2=78 a3=c0003b2118 items=0 ppid=2537 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:24.207029 kernel: audit: type=1400 audit(1752580344.166:1019): avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066386366383162343434336666346534623034646130366661386662 Jul 15 11:52:24.172000 audit: BPF prog-id=137 op=UNLOAD Jul 15 11:52:24.172000 audit: BPF prog-id=136 op=UNLOAD Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { perfmon } for pid=3286 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit[3286]: AVC avc: denied { bpf } for pid=3286 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:24.172000 audit: BPF prog-id=138 op=LOAD Jul 15 11:52:24.172000 audit[3286]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00013fc30 a2=78 a3=c0003b21a8 items=0 ppid=2537 pid=3286 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:24.172000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066386366383162343434336666346534623034646130366661386662 Jul 15 11:52:24.207492 env[1245]: time="2025-07-15T11:52:24.207399982Z" level=info msg="StartContainer for \"0f8cf81b4443ff4e4b04da06fa8fb312ef9aaff5de4b55768e573e1d3b6c789c\" returns successfully" Jul 15 11:52:24.902794 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 15 11:52:24.903130 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 15 11:52:25.252830 kubelet[2102]: I0715 11:52:25.249191 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-4lts6" podStartSLOduration=1.7506084610000001 podStartE2EDuration="22.239998012s" podCreationTimestamp="2025-07-15 11:52:03 +0000 UTC" firstStartedPulling="2025-07-15 11:52:03.564920955 +0000 UTC m=+12.898166959" lastFinishedPulling="2025-07-15 11:52:24.054310505 +0000 UTC m=+33.387556510" observedRunningTime="2025-07-15 11:52:24.930646083 +0000 UTC m=+34.263892095" watchObservedRunningTime="2025-07-15 11:52:25.239998012 +0000 UTC m=+34.573244019" Jul 15 11:52:25.259860 env[1245]: time="2025-07-15T11:52:25.258680909Z" level=info msg="StopPodSandbox for \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\"" Jul 15 11:52:25.918958 systemd[1]: run-containerd-runc-k8s.io-0f8cf81b4443ff4e4b04da06fa8fb312ef9aaff5de4b55768e573e1d3b6c789c-runc.8vdWzf.mount: Deactivated successfully. Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.339 [INFO][3367] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.341 [INFO][3367] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" iface="eth0" netns="/var/run/netns/cni-f895ecfd-4649-2c0b-403f-05b648c33e0f" Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.341 [INFO][3367] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" iface="eth0" netns="/var/run/netns/cni-f895ecfd-4649-2c0b-403f-05b648c33e0f" Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.344 [INFO][3367] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" iface="eth0" netns="/var/run/netns/cni-f895ecfd-4649-2c0b-403f-05b648c33e0f" Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.344 [INFO][3367] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.344 [INFO][3367] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.933 [INFO][3377] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" HandleID="k8s-pod-network.d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Workload="localhost-k8s-whisker--74b678ff6c--bhdg7-eth0" Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.940 [INFO][3377] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.941 [INFO][3377] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.952 [WARNING][3377] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" HandleID="k8s-pod-network.d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Workload="localhost-k8s-whisker--74b678ff6c--bhdg7-eth0" Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.953 [INFO][3377] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" HandleID="k8s-pod-network.d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Workload="localhost-k8s-whisker--74b678ff6c--bhdg7-eth0" Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.953 [INFO][3377] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:25.956600 env[1245]: 2025-07-15 11:52:25.954 [INFO][3367] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:52:25.962877 env[1245]: time="2025-07-15T11:52:25.958621605Z" level=info msg="TearDown network for sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\" successfully" Jul 15 11:52:25.962877 env[1245]: time="2025-07-15T11:52:25.958644504Z" level=info msg="StopPodSandbox for \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\" returns successfully" Jul 15 11:52:25.958130 systemd[1]: run-netns-cni\x2df895ecfd\x2d4649\x2d2c0b\x2d403f\x2d05b648c33e0f.mount: Deactivated successfully. Jul 15 11:52:26.041156 kubelet[2102]: I0715 11:52:26.041127 2102 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/351db5f6-d720-4547-9262-3197283adaee-whisker-ca-bundle\") pod \"351db5f6-d720-4547-9262-3197283adaee\" (UID: \"351db5f6-d720-4547-9262-3197283adaee\") " Jul 15 11:52:26.041398 kubelet[2102]: I0715 11:52:26.041368 2102 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/351db5f6-d720-4547-9262-3197283adaee-whisker-backend-key-pair\") pod \"351db5f6-d720-4547-9262-3197283adaee\" (UID: \"351db5f6-d720-4547-9262-3197283adaee\") " Jul 15 11:52:26.041556 kubelet[2102]: I0715 11:52:26.041541 2102 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-v7zg5\" (UniqueName: \"kubernetes.io/projected/351db5f6-d720-4547-9262-3197283adaee-kube-api-access-v7zg5\") pod \"351db5f6-d720-4547-9262-3197283adaee\" (UID: \"351db5f6-d720-4547-9262-3197283adaee\") " Jul 15 11:52:26.045135 kubelet[2102]: I0715 11:52:26.041144 2102 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/351db5f6-d720-4547-9262-3197283adaee-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "351db5f6-d720-4547-9262-3197283adaee" (UID: "351db5f6-d720-4547-9262-3197283adaee"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGidValue "" Jul 15 11:52:26.049808 systemd[1]: var-lib-kubelet-pods-351db5f6\x2dd720\x2d4547\x2d9262\x2d3197283adaee-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 15 11:52:26.052460 systemd[1]: var-lib-kubelet-pods-351db5f6\x2dd720\x2d4547\x2d9262\x2d3197283adaee-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dv7zg5.mount: Deactivated successfully. Jul 15 11:52:26.053553 kubelet[2102]: I0715 11:52:26.053526 2102 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/351db5f6-d720-4547-9262-3197283adaee-kube-api-access-v7zg5" (OuterVolumeSpecName: "kube-api-access-v7zg5") pod "351db5f6-d720-4547-9262-3197283adaee" (UID: "351db5f6-d720-4547-9262-3197283adaee"). InnerVolumeSpecName "kube-api-access-v7zg5". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 15 11:52:26.054245 kubelet[2102]: I0715 11:52:26.054228 2102 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/351db5f6-d720-4547-9262-3197283adaee-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "351db5f6-d720-4547-9262-3197283adaee" (UID: "351db5f6-d720-4547-9262-3197283adaee"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 15 11:52:26.142726 kubelet[2102]: I0715 11:52:26.142696 2102 reconciler_common.go:293] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/351db5f6-d720-4547-9262-3197283adaee-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 15 11:52:26.142878 kubelet[2102]: I0715 11:52:26.142869 2102 reconciler_common.go:293] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/351db5f6-d720-4547-9262-3197283adaee-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 15 11:52:26.143577 kubelet[2102]: I0715 11:52:26.142953 2102 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-v7zg5\" (UniqueName: \"kubernetes.io/projected/351db5f6-d720-4547-9262-3197283adaee-kube-api-access-v7zg5\") on node \"localhost\" DevicePath \"\"" Jul 15 11:52:26.324000 audit[3468]: AVC avc: denied { write } for pid=3468 comm="tee" name="fd" dev="proc" ino=36915 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:52:26.326000 audit[3470]: AVC avc: denied { write } for pid=3470 comm="tee" name="fd" dev="proc" ino=36919 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:52:26.326000 audit[3470]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffdb35407ef a2=241 a3=1b6 items=1 ppid=3418 pid=3470 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.326000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 15 11:52:26.326000 audit: PATH item=0 name="/dev/fd/63" inode=36793 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:52:26.326000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:52:26.324000 audit[3468]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe45ea87ed a2=241 a3=1b6 items=1 ppid=3424 pid=3468 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.324000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 15 11:52:26.324000 audit: PATH item=0 name="/dev/fd/63" inode=36792 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:52:26.324000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:52:26.327000 audit[3473]: AVC avc: denied { write } for pid=3473 comm="tee" name="fd" dev="proc" ino=36923 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:52:26.327000 audit[3473]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc40e1e7ee a2=241 a3=1b6 items=1 ppid=3420 pid=3473 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.327000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 15 11:52:26.327000 audit: PATH item=0 name="/dev/fd/63" inode=36912 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:52:26.327000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:52:26.329000 audit[3478]: AVC avc: denied { write } for pid=3478 comm="tee" name="fd" dev="proc" ino=36927 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:52:26.329000 audit[3478]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff354927dd a2=241 a3=1b6 items=1 ppid=3421 pid=3478 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.329000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 15 11:52:26.329000 audit: PATH item=0 name="/dev/fd/63" inode=36795 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:52:26.329000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:52:26.329000 audit[3475]: AVC avc: denied { write } for pid=3475 comm="tee" name="fd" dev="proc" ino=36931 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:52:26.329000 audit[3475]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe8c1af7ed a2=241 a3=1b6 items=1 ppid=3426 pid=3475 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.329000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 15 11:52:26.329000 audit: PATH item=0 name="/dev/fd/63" inode=36794 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:52:26.329000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:52:26.356000 audit[3488]: AVC avc: denied { write } for pid=3488 comm="tee" name="fd" dev="proc" ino=36938 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:52:26.356000 audit[3488]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd041407ed a2=241 a3=1b6 items=1 ppid=3431 pid=3488 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.356000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 15 11:52:26.356000 audit: PATH item=0 name="/dev/fd/63" inode=36935 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:52:26.356000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:52:26.364000 audit[3490]: AVC avc: denied { write } for pid=3490 comm="tee" name="fd" dev="proc" ino=36942 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:52:26.364000 audit[3490]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffe1e7be7de a2=241 a3=1b6 items=1 ppid=3425 pid=3490 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.364000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 15 11:52:26.364000 audit: PATH item=0 name="/dev/fd/63" inode=36809 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:52:26.364000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:52:26.526000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.526000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.526000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.526000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.526000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.526000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.526000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.526000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.526000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.526000 audit: BPF prog-id=139 op=LOAD Jul 15 11:52:26.526000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffaa18d810 a2=98 a3=1fffffffffffffff items=0 ppid=3428 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.526000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:52:26.526000 audit: BPF prog-id=139 op=UNLOAD Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit: BPF prog-id=140 op=LOAD Jul 15 11:52:26.527000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffaa18d6f0 a2=94 a3=3 items=0 ppid=3428 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.527000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:52:26.527000 audit: BPF prog-id=140 op=UNLOAD Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { bpf } for pid=3510 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit: BPF prog-id=141 op=LOAD Jul 15 11:52:26.527000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fffaa18d730 a2=94 a3=7fffaa18d910 items=0 ppid=3428 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.527000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:52:26.527000 audit: BPF prog-id=141 op=UNLOAD Jul 15 11:52:26.527000 audit[3510]: AVC avc: denied { perfmon } for pid=3510 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.527000 audit[3510]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7fffaa18d800 a2=50 a3=a000000085 items=0 ppid=3428 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.527000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:52:26.529000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.529000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.529000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.529000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.529000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.529000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.529000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.529000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.529000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.529000 audit: BPF prog-id=142 op=LOAD Jul 15 11:52:26.529000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffe4bf61810 a2=98 a3=3 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.529000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.530000 audit: BPF prog-id=142 op=UNLOAD Jul 15 11:52:26.531000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.531000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.531000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.531000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.531000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.531000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.531000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.531000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.531000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.531000 audit: BPF prog-id=143 op=LOAD Jul 15 11:52:26.531000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe4bf61600 a2=94 a3=54428f items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.531000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.532000 audit: BPF prog-id=143 op=UNLOAD Jul 15 11:52:26.532000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.532000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.532000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.532000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.532000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.532000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.532000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.532000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.532000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.532000 audit: BPF prog-id=144 op=LOAD Jul 15 11:52:26.532000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe4bf61630 a2=94 a3=2 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.532000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.532000 audit: BPF prog-id=144 op=UNLOAD Jul 15 11:52:26.615000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.615000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.615000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.615000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.615000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.615000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.615000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.615000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.615000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.615000 audit: BPF prog-id=145 op=LOAD Jul 15 11:52:26.615000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffe4bf614f0 a2=94 a3=1 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.615000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.615000 audit: BPF prog-id=145 op=UNLOAD Jul 15 11:52:26.615000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.615000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffe4bf615c0 a2=50 a3=7ffe4bf616a0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.615000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.623000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.623000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4bf61500 a2=28 a3=0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.623000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4bf61530 a2=28 a3=0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4bf61440 a2=28 a3=0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4bf61550 a2=28 a3=0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4bf61530 a2=28 a3=0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4bf61520 a2=28 a3=0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4bf61550 a2=28 a3=0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4bf61530 a2=28 a3=0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4bf61550 a2=28 a3=0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffe4bf61520 a2=28 a3=0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffe4bf61590 a2=28 a3=0 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe4bf61340 a2=50 a3=1 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit: BPF prog-id=146 op=LOAD Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffe4bf61340 a2=94 a3=5 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit: BPF prog-id=146 op=UNLOAD Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffe4bf613f0 a2=50 a3=1 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffe4bf61510 a2=4 a3=38 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { confidentiality } for pid=3511 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe4bf61560 a2=94 a3=6 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.624000 audit[3511]: AVC avc: denied { confidentiality } for pid=3511 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:52:26.624000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe4bf60d10 a2=94 a3=88 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.624000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.626000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.626000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.626000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.626000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.626000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.626000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.626000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.626000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.626000 audit[3511]: AVC avc: denied { perfmon } for pid=3511 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.626000 audit[3511]: AVC avc: denied { bpf } for pid=3511 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.626000 audit[3511]: AVC avc: denied { confidentiality } for pid=3511 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:52:26.626000 audit[3511]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffe4bf60d10 a2=94 a3=88 items=0 ppid=3428 pid=3511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.626000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit: BPF prog-id=147 op=LOAD Jul 15 11:52:26.638000 audit[3531]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffea6fe8090 a2=98 a3=1999999999999999 items=0 ppid=3428 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.638000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:52:26.638000 audit: BPF prog-id=147 op=UNLOAD Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit: BPF prog-id=148 op=LOAD Jul 15 11:52:26.638000 audit[3531]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffea6fe7f70 a2=94 a3=ffff items=0 ppid=3428 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.638000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:52:26.638000 audit: BPF prog-id=148 op=UNLOAD Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { perfmon } for pid=3531 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit[3531]: AVC avc: denied { bpf } for pid=3531 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.638000 audit: BPF prog-id=149 op=LOAD Jul 15 11:52:26.638000 audit[3531]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffea6fe7fb0 a2=94 a3=7ffea6fe8190 items=0 ppid=3428 pid=3531 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.638000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:52:26.638000 audit: BPF prog-id=149 op=UNLOAD Jul 15 11:52:26.695096 systemd-networkd[1058]: vxlan.calico: Link UP Jul 15 11:52:26.695102 systemd-networkd[1058]: vxlan.calico: Gained carrier Jul 15 11:52:26.704000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.704000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.704000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.704000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.704000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.704000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.704000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.704000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.704000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.704000 audit: BPF prog-id=150 op=LOAD Jul 15 11:52:26.704000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff7c36da30 a2=98 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.704000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.704000 audit: BPF prog-id=150 op=UNLOAD Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit: BPF prog-id=151 op=LOAD Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff7c36d840 a2=94 a3=54428f items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit: BPF prog-id=151 op=UNLOAD Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit: BPF prog-id=152 op=LOAD Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff7c36d870 a2=94 a3=2 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit: BPF prog-id=152 op=UNLOAD Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff7c36d740 a2=28 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff7c36d770 a2=28 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff7c36d680 a2=28 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff7c36d790 a2=28 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff7c36d770 a2=28 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff7c36d760 a2=28 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff7c36d790 a2=28 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff7c36d770 a2=28 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff7c36d790 a2=28 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff7c36d760 a2=28 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7fff7c36d7d0 a2=28 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit: BPF prog-id=153 op=LOAD Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff7c36d640 a2=94 a3=0 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit: BPF prog-id=153 op=UNLOAD Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7fff7c36d630 a2=50 a3=2800 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7fff7c36d630 a2=50 a3=2800 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit: BPF prog-id=154 op=LOAD Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff7c36ce50 a2=94 a3=2 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.714000 audit: BPF prog-id=154 op=UNLOAD Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { perfmon } for pid=3559 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit[3559]: AVC avc: denied { bpf } for pid=3559 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.714000 audit: BPF prog-id=155 op=LOAD Jul 15 11:52:26.714000 audit[3559]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff7c36cf50 a2=94 a3=30 items=0 ppid=3428 pid=3559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.714000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit: BPF prog-id=156 op=LOAD Jul 15 11:52:26.717000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd5412dc30 a2=98 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.717000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.717000 audit: BPF prog-id=156 op=UNLOAD Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit: BPF prog-id=157 op=LOAD Jul 15 11:52:26.717000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd5412da20 a2=94 a3=54428f items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.717000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.717000 audit: BPF prog-id=157 op=UNLOAD Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.717000 audit: BPF prog-id=158 op=LOAD Jul 15 11:52:26.717000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd5412da50 a2=94 a3=2 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.717000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.717000 audit: BPF prog-id=158 op=UNLOAD Jul 15 11:52:26.811000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.811000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.811000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.811000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.811000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.811000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.811000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.811000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.811000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.811000 audit: BPF prog-id=159 op=LOAD Jul 15 11:52:26.811000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffd5412d910 a2=94 a3=1 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.811000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.813000 audit: BPF prog-id=159 op=UNLOAD Jul 15 11:52:26.813000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.813000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffd5412d9e0 a2=50 a3=7ffd5412dac0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.813000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.816936 systemd[1]: Removed slice kubepods-besteffort-pod351db5f6_d720_4547_9262_3197283adaee.slice. Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd5412d920 a2=28 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd5412d950 a2=28 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd5412d860 a2=28 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd5412d970 a2=28 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd5412d950 a2=28 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd5412d940 a2=28 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd5412d970 a2=28 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd5412d950 a2=28 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd5412d970 a2=28 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffd5412d940 a2=28 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffd5412d9b0 a2=28 a3=0 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd5412d760 a2=50 a3=1 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit: BPF prog-id=160 op=LOAD Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffd5412d760 a2=94 a3=5 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit: BPF prog-id=160 op=UNLOAD Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffd5412d810 a2=50 a3=1 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.827000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.827000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffd5412d930 a2=4 a3=38 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.827000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { confidentiality } for pid=3561 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:52:26.828000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd5412d980 a2=94 a3=6 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.828000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { confidentiality } for pid=3561 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:52:26.828000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd5412d130 a2=94 a3=88 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.828000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { confidentiality } for pid=3561 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:52:26.828000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffd5412d130 a2=94 a3=88 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.828000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd5412eb60 a2=10 a3=f8f00800 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.828000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.828000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.828000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd5412ea00 a2=10 a3=3 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.828000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.829000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.829000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd5412e9a0 a2=10 a3=3 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.829000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.829000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:26.829000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7ffd5412e9a0 a2=10 a3=7 items=0 ppid=3428 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.829000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:52:26.837000 audit: BPF prog-id=155 op=UNLOAD Jul 15 11:52:26.901000 audit[3596]: NETFILTER_CFG table=mangle:99 family=2 entries=16 op=nft_register_chain pid=3596 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:26.901000 audit[3596]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffe38188000 a2=0 a3=7ffe38187fec items=0 ppid=3428 pid=3596 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.901000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:26.914000 audit[3595]: NETFILTER_CFG table=nat:100 family=2 entries=15 op=nft_register_chain pid=3595 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:26.914000 audit[3595]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7fff4ff0fb50 a2=0 a3=7fff4ff0fb3c items=0 ppid=3428 pid=3595 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.914000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:26.915000 audit[3598]: NETFILTER_CFG table=filter:101 family=2 entries=39 op=nft_register_chain pid=3598 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:26.915000 audit[3598]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffc974ffd60 a2=0 a3=7ffc974ffd4c items=0 ppid=3428 pid=3598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.915000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:26.929000 audit[3594]: NETFILTER_CFG table=raw:102 family=2 entries=21 op=nft_register_chain pid=3594 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:26.929000 audit[3594]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7fff4ea035d0 a2=0 a3=7fff4ea035bc items=0 ppid=3428 pid=3594 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:26.929000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:27.048502 systemd[1]: Created slice kubepods-besteffort-podf35a095f_60a7_4cce_8359_5211c1fa35bf.slice. Jul 15 11:52:27.156607 kubelet[2102]: I0715 11:52:27.156528 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-lkljs\" (UniqueName: \"kubernetes.io/projected/f35a095f-60a7-4cce-8359-5211c1fa35bf-kube-api-access-lkljs\") pod \"whisker-df96468c7-htxlk\" (UID: \"f35a095f-60a7-4cce-8359-5211c1fa35bf\") " pod="calico-system/whisker-df96468c7-htxlk" Jul 15 11:52:27.156607 kubelet[2102]: I0715 11:52:27.156567 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/f35a095f-60a7-4cce-8359-5211c1fa35bf-whisker-backend-key-pair\") pod \"whisker-df96468c7-htxlk\" (UID: \"f35a095f-60a7-4cce-8359-5211c1fa35bf\") " pod="calico-system/whisker-df96468c7-htxlk" Jul 15 11:52:27.156607 kubelet[2102]: I0715 11:52:27.156585 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/f35a095f-60a7-4cce-8359-5211c1fa35bf-whisker-ca-bundle\") pod \"whisker-df96468c7-htxlk\" (UID: \"f35a095f-60a7-4cce-8359-5211c1fa35bf\") " pod="calico-system/whisker-df96468c7-htxlk" Jul 15 11:52:27.352135 env[1245]: time="2025-07-15T11:52:27.351927175Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-df96468c7-htxlk,Uid:f35a095f-60a7-4cce-8359-5211c1fa35bf,Namespace:calico-system,Attempt:0,}" Jul 15 11:52:27.546769 systemd-networkd[1058]: cali929623bf70b: Link UP Jul 15 11:52:27.547982 systemd-networkd[1058]: cali929623bf70b: Gained carrier Jul 15 11:52:27.548457 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali929623bf70b: link becomes ready Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.410 [INFO][3610] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--df96468c7--htxlk-eth0 whisker-df96468c7- calico-system f35a095f-60a7-4cce-8359-5211c1fa35bf 902 0 2025-07-15 11:52:26 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:df96468c7 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-df96468c7-htxlk eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] cali929623bf70b [] [] }} ContainerID="c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" Namespace="calico-system" Pod="whisker-df96468c7-htxlk" WorkloadEndpoint="localhost-k8s-whisker--df96468c7--htxlk-" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.410 [INFO][3610] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" Namespace="calico-system" Pod="whisker-df96468c7-htxlk" WorkloadEndpoint="localhost-k8s-whisker--df96468c7--htxlk-eth0" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.468 [INFO][3623] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" HandleID="k8s-pod-network.c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" Workload="localhost-k8s-whisker--df96468c7--htxlk-eth0" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.471 [INFO][3623] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" HandleID="k8s-pod-network.c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" Workload="localhost-k8s-whisker--df96468c7--htxlk-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-df96468c7-htxlk", "timestamp":"2025-07-15 11:52:27.468533084 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.471 [INFO][3623] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.471 [INFO][3623] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.471 [INFO][3623] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.488 [INFO][3623] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" host="localhost" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.520 [INFO][3623] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.523 [INFO][3623] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.524 [INFO][3623] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.525 [INFO][3623] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.525 [INFO][3623] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" host="localhost" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.526 [INFO][3623] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022 Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.530 [INFO][3623] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" host="localhost" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.535 [INFO][3623] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" host="localhost" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.535 [INFO][3623] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" host="localhost" Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.535 [INFO][3623] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:27.563270 env[1245]: 2025-07-15 11:52:27.535 [INFO][3623] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" HandleID="k8s-pod-network.c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" Workload="localhost-k8s-whisker--df96468c7--htxlk-eth0" Jul 15 11:52:27.563740 env[1245]: 2025-07-15 11:52:27.537 [INFO][3610] cni-plugin/k8s.go 418: Populated endpoint ContainerID="c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" Namespace="calico-system" Pod="whisker-df96468c7-htxlk" WorkloadEndpoint="localhost-k8s-whisker--df96468c7--htxlk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--df96468c7--htxlk-eth0", GenerateName:"whisker-df96468c7-", Namespace:"calico-system", SelfLink:"", UID:"f35a095f-60a7-4cce-8359-5211c1fa35bf", ResourceVersion:"902", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"df96468c7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-df96468c7-htxlk", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali929623bf70b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:27.563740 env[1245]: 2025-07-15 11:52:27.537 [INFO][3610] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" Namespace="calico-system" Pod="whisker-df96468c7-htxlk" WorkloadEndpoint="localhost-k8s-whisker--df96468c7--htxlk-eth0" Jul 15 11:52:27.563740 env[1245]: 2025-07-15 11:52:27.537 [INFO][3610] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali929623bf70b ContainerID="c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" Namespace="calico-system" Pod="whisker-df96468c7-htxlk" WorkloadEndpoint="localhost-k8s-whisker--df96468c7--htxlk-eth0" Jul 15 11:52:27.563740 env[1245]: 2025-07-15 11:52:27.551 [INFO][3610] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" Namespace="calico-system" Pod="whisker-df96468c7-htxlk" WorkloadEndpoint="localhost-k8s-whisker--df96468c7--htxlk-eth0" Jul 15 11:52:27.563740 env[1245]: 2025-07-15 11:52:27.551 [INFO][3610] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" Namespace="calico-system" Pod="whisker-df96468c7-htxlk" WorkloadEndpoint="localhost-k8s-whisker--df96468c7--htxlk-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--df96468c7--htxlk-eth0", GenerateName:"whisker-df96468c7-", Namespace:"calico-system", SelfLink:"", UID:"f35a095f-60a7-4cce-8359-5211c1fa35bf", ResourceVersion:"902", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 26, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"df96468c7", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022", Pod:"whisker-df96468c7-htxlk", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"cali929623bf70b", MAC:"ee:5a:af:f8:15:4a", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:27.563740 env[1245]: 2025-07-15 11:52:27.561 [INFO][3610] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022" Namespace="calico-system" Pod="whisker-df96468c7-htxlk" WorkloadEndpoint="localhost-k8s-whisker--df96468c7--htxlk-eth0" Jul 15 11:52:27.571139 env[1245]: time="2025-07-15T11:52:27.571098669Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:27.571220 env[1245]: time="2025-07-15T11:52:27.571126667Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:27.571220 env[1245]: time="2025-07-15T11:52:27.571143476Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:27.571354 env[1245]: time="2025-07-15T11:52:27.571333033Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022 pid=3643 runtime=io.containerd.runc.v2 Jul 15 11:52:27.595434 systemd[1]: Started cri-containerd-c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022.scope. Jul 15 11:52:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.606000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.606000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.606000 audit: BPF prog-id=161 op=LOAD Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3643 pid=3656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:27.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623263353731383936623662303339393030383432633331656436 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3643 pid=3656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:27.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623263353731383936623662303339393030383432633331656436 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit: BPF prog-id=162 op=LOAD Jul 15 11:52:27.607000 audit[3656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0002998e0 items=0 ppid=3643 pid=3656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:27.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623263353731383936623662303339393030383432633331656436 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit: BPF prog-id=163 op=LOAD Jul 15 11:52:27.607000 audit[3656]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000299928 items=0 ppid=3643 pid=3656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:27.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623263353731383936623662303339393030383432633331656436 Jul 15 11:52:27.607000 audit: BPF prog-id=163 op=UNLOAD Jul 15 11:52:27.607000 audit: BPF prog-id=162 op=UNLOAD Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { perfmon } for pid=3656 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit[3656]: AVC avc: denied { bpf } for pid=3656 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:27.607000 audit: BPF prog-id=164 op=LOAD Jul 15 11:52:27.607000 audit[3656]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000299d38 items=0 ppid=3643 pid=3656 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:27.607000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6338623263353731383936623662303339393030383432633331656436 Jul 15 11:52:27.609193 systemd-resolved[1202]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:52:27.599000 audit[3657]: NETFILTER_CFG table=filter:103 family=2 entries=59 op=nft_register_chain pid=3657 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:27.599000 audit[3657]: SYSCALL arch=c000003e syscall=46 success=yes exit=35860 a0=3 a1=7ffc8f1bb8b0 a2=0 a3=7ffc8f1bb89c items=0 ppid=3428 pid=3657 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:27.599000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:27.628486 env[1245]: time="2025-07-15T11:52:27.628432725Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-df96468c7-htxlk,Uid:f35a095f-60a7-4cce-8359-5211c1fa35bf,Namespace:calico-system,Attempt:0,} returns sandbox id \"c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022\"" Jul 15 11:52:27.639849 env[1245]: time="2025-07-15T11:52:27.639828232Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 15 11:52:28.399611 systemd-networkd[1058]: vxlan.calico: Gained IPv6LL Jul 15 11:52:28.784669 env[1245]: time="2025-07-15T11:52:28.784507593Z" level=info msg="StopPodSandbox for \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\"" Jul 15 11:52:28.790182 kubelet[2102]: I0715 11:52:28.790145 2102 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="351db5f6-d720-4547-9262-3197283adaee" path="/var/lib/kubelet/pods/351db5f6-d720-4547-9262-3197283adaee/volumes" Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.815 [INFO][3696] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.815 [INFO][3696] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" iface="eth0" netns="/var/run/netns/cni-6c2d1eb0-aaec-f005-3ac2-5230a021cb9c" Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.815 [INFO][3696] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" iface="eth0" netns="/var/run/netns/cni-6c2d1eb0-aaec-f005-3ac2-5230a021cb9c" Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.815 [INFO][3696] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" iface="eth0" netns="/var/run/netns/cni-6c2d1eb0-aaec-f005-3ac2-5230a021cb9c" Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.815 [INFO][3696] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.815 [INFO][3696] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.835 [INFO][3703] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" HandleID="k8s-pod-network.f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.835 [INFO][3703] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.835 [INFO][3703] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.841 [WARNING][3703] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" HandleID="k8s-pod-network.f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.841 [INFO][3703] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" HandleID="k8s-pod-network.f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.842 [INFO][3703] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:28.845004 env[1245]: 2025-07-15 11:52:28.843 [INFO][3696] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:52:28.846886 systemd[1]: run-netns-cni\x2d6c2d1eb0\x2daaec\x2df005\x2d3ac2\x2d5230a021cb9c.mount: Deactivated successfully. Jul 15 11:52:28.847596 env[1245]: time="2025-07-15T11:52:28.847565074Z" level=info msg="TearDown network for sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\" successfully" Jul 15 11:52:28.847655 env[1245]: time="2025-07-15T11:52:28.847644032Z" level=info msg="StopPodSandbox for \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\" returns successfully" Jul 15 11:52:28.848152 env[1245]: time="2025-07-15T11:52:28.848136139Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-v6rqg,Uid:84c60641-bf5d-4300-a575-76fcec4a7ca4,Namespace:calico-system,Attempt:1,}" Jul 15 11:52:28.943026 systemd-networkd[1058]: califb771d6bdae: Link UP Jul 15 11:52:28.945073 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:52:28.945171 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): califb771d6bdae: link becomes ready Jul 15 11:52:28.945250 systemd-networkd[1058]: califb771d6bdae: Gained carrier Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.899 [INFO][3710] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0 goldmane-58fd7646b9- calico-system 84c60641-bf5d-4300-a575-76fcec4a7ca4 911 0 2025-07-15 11:52:02 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:58fd7646b9 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-58fd7646b9-v6rqg eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] califb771d6bdae [] [] }} ContainerID="5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" Namespace="calico-system" Pod="goldmane-58fd7646b9-v6rqg" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--v6rqg-" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.899 [INFO][3710] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" Namespace="calico-system" Pod="goldmane-58fd7646b9-v6rqg" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.916 [INFO][3722] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" HandleID="k8s-pod-network.5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.916 [INFO][3722] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" HandleID="k8s-pod-network.5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d4ff0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-58fd7646b9-v6rqg", "timestamp":"2025-07-15 11:52:28.916749755 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.916 [INFO][3722] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.916 [INFO][3722] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.916 [INFO][3722] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.921 [INFO][3722] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" host="localhost" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.923 [INFO][3722] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.925 [INFO][3722] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.926 [INFO][3722] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.927 [INFO][3722] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.927 [INFO][3722] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" host="localhost" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.928 [INFO][3722] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139 Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.934 [INFO][3722] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" host="localhost" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.938 [INFO][3722] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" host="localhost" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.938 [INFO][3722] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" host="localhost" Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.938 [INFO][3722] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:28.959100 env[1245]: 2025-07-15 11:52:28.938 [INFO][3722] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" HandleID="k8s-pod-network.5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:52:28.964589 env[1245]: 2025-07-15 11:52:28.940 [INFO][3710] cni-plugin/k8s.go 418: Populated endpoint ContainerID="5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" Namespace="calico-system" Pod="goldmane-58fd7646b9-v6rqg" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"84c60641-bf5d-4300-a575-76fcec4a7ca4", ResourceVersion:"911", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-58fd7646b9-v6rqg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califb771d6bdae", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:28.964589 env[1245]: 2025-07-15 11:52:28.940 [INFO][3710] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" Namespace="calico-system" Pod="goldmane-58fd7646b9-v6rqg" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:52:28.964589 env[1245]: 2025-07-15 11:52:28.940 [INFO][3710] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to califb771d6bdae ContainerID="5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" Namespace="calico-system" Pod="goldmane-58fd7646b9-v6rqg" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:52:28.964589 env[1245]: 2025-07-15 11:52:28.946 [INFO][3710] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" Namespace="calico-system" Pod="goldmane-58fd7646b9-v6rqg" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:52:28.964589 env[1245]: 2025-07-15 11:52:28.946 [INFO][3710] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" Namespace="calico-system" Pod="goldmane-58fd7646b9-v6rqg" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"84c60641-bf5d-4300-a575-76fcec4a7ca4", ResourceVersion:"911", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139", Pod:"goldmane-58fd7646b9-v6rqg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califb771d6bdae", MAC:"7a:fc:b3:e2:53:a9", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:28.964589 env[1245]: 2025-07-15 11:52:28.953 [INFO][3710] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139" Namespace="calico-system" Pod="goldmane-58fd7646b9-v6rqg" WorkloadEndpoint="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:52:28.972553 env[1245]: time="2025-07-15T11:52:28.972494299Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:28.972553 env[1245]: time="2025-07-15T11:52:28.972534230Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:28.972752 env[1245]: time="2025-07-15T11:52:28.972541494Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:28.972824 env[1245]: time="2025-07-15T11:52:28.972763561Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139 pid=3747 runtime=io.containerd.runc.v2 Jul 15 11:52:28.978000 audit[3757]: NETFILTER_CFG table=filter:104 family=2 entries=44 op=nft_register_chain pid=3757 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:28.978000 audit[3757]: SYSCALL arch=c000003e syscall=46 success=yes exit=25180 a0=3 a1=7ffc5d8bf160 a2=0 a3=7ffc5d8bf14c items=0 ppid=3428 pid=3757 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:28.978000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:28.984291 systemd[1]: Started cri-containerd-5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139.scope. Jul 15 11:52:28.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.993000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.993000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.993000 audit: BPF prog-id=165 op=LOAD Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3747 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:28.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562316438373064653736363132346265663266363036316430653237 Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3747 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:28.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562316438373064653736363132346265663266363036316430653237 Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.994000 audit: BPF prog-id=166 op=LOAD Jul 15 11:52:28.994000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002a3c00 items=0 ppid=3747 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:28.994000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562316438373064653736363132346265663266363036316430653237 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit: BPF prog-id=167 op=LOAD Jul 15 11:52:28.995000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002a3c48 items=0 ppid=3747 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:28.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562316438373064653736363132346265663266363036316430653237 Jul 15 11:52:28.995000 audit: BPF prog-id=167 op=UNLOAD Jul 15 11:52:28.995000 audit: BPF prog-id=166 op=UNLOAD Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { perfmon } for pid=3756 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit[3756]: AVC avc: denied { bpf } for pid=3756 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:28.995000 audit: BPF prog-id=168 op=LOAD Jul 15 11:52:28.995000 audit[3756]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000388058 items=0 ppid=3747 pid=3756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:28.995000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3562316438373064653736363132346265663266363036316430653237 Jul 15 11:52:28.998182 systemd-resolved[1202]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:52:29.027391 env[1245]: time="2025-07-15T11:52:29.027360976Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-58fd7646b9-v6rqg,Uid:84c60641-bf5d-4300-a575-76fcec4a7ca4,Namespace:calico-system,Attempt:1,} returns sandbox id \"5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139\"" Jul 15 11:52:29.295668 systemd-networkd[1058]: cali929623bf70b: Gained IPv6LL Jul 15 11:52:29.369682 env[1245]: time="2025-07-15T11:52:29.369638271Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:29.371421 env[1245]: time="2025-07-15T11:52:29.371403136Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:29.373789 env[1245]: time="2025-07-15T11:52:29.373772266Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:29.376931 env[1245]: time="2025-07-15T11:52:29.376916312Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:29.377171 env[1245]: time="2025-07-15T11:52:29.377157245Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 15 11:52:29.379150 env[1245]: time="2025-07-15T11:52:29.378982791Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 15 11:52:29.379761 env[1245]: time="2025-07-15T11:52:29.379711136Z" level=info msg="CreateContainer within sandbox \"c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 15 11:52:29.390916 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1153036355.mount: Deactivated successfully. Jul 15 11:52:29.404782 env[1245]: time="2025-07-15T11:52:29.404753564Z" level=info msg="CreateContainer within sandbox \"c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"4863657a6036a101253a8ef09300f99dae3530756e4bd1e3369d74db4ccd25cf\"" Jul 15 11:52:29.405787 env[1245]: time="2025-07-15T11:52:29.405579151Z" level=info msg="StartContainer for \"4863657a6036a101253a8ef09300f99dae3530756e4bd1e3369d74db4ccd25cf\"" Jul 15 11:52:29.420366 systemd[1]: Started cri-containerd-4863657a6036a101253a8ef09300f99dae3530756e4bd1e3369d74db4ccd25cf.scope. Jul 15 11:52:29.433614 kernel: kauditd_printk_skb: 710 callbacks suppressed Jul 15 11:52:29.433686 kernel: audit: type=1400 audit(1752580349.428:1171): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.433708 kernel: audit: type=1400 audit(1752580349.429:1172): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.428000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.436217 kernel: audit: type=1400 audit(1752580349.429:1173): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.440699 kernel: audit: type=1400 audit(1752580349.429:1174): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.443218 kernel: audit: type=1400 audit(1752580349.429:1175): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.445770 kernel: audit: type=1400 audit(1752580349.429:1176): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.445797 kernel: audit: type=1400 audit(1752580349.429:1177): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.429000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.450742 kernel: audit: type=1400 audit(1752580349.429:1178): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.453174 kernel: audit: type=1400 audit(1752580349.429:1179): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.453201 kernel: audit: type=1400 audit(1752580349.432:1180): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.429000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.432000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.432000 audit: BPF prog-id=169 op=LOAD Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit[3788]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3643 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:29.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438363336353761363033366131303132353361386566303933303066 Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit[3788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3643 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:29.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438363336353761363033366131303132353361386566303933303066 Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.439000 audit: BPF prog-id=170 op=LOAD Jul 15 11:52:29.439000 audit[3788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000246110 items=0 ppid=3643 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:29.439000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438363336353761363033366131303132353361386566303933303066 Jul 15 11:52:29.447000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.447000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.447000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.447000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.447000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.447000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.447000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.447000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.447000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.447000 audit: BPF prog-id=171 op=LOAD Jul 15 11:52:29.447000 audit[3788]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000246158 items=0 ppid=3643 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:29.447000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438363336353761363033366131303132353361386566303933303066 Jul 15 11:52:29.454000 audit: BPF prog-id=171 op=UNLOAD Jul 15 11:52:29.454000 audit: BPF prog-id=170 op=UNLOAD Jul 15 11:52:29.455000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.455000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.455000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.455000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.455000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.455000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.455000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.455000 audit[3788]: AVC avc: denied { perfmon } for pid=3788 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.455000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.455000 audit[3788]: AVC avc: denied { bpf } for pid=3788 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:29.455000 audit: BPF prog-id=172 op=LOAD Jul 15 11:52:29.455000 audit[3788]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000246568 items=0 ppid=3643 pid=3788 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:29.455000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438363336353761363033366131303132353361386566303933303066 Jul 15 11:52:29.509744 env[1245]: time="2025-07-15T11:52:29.509706675Z" level=info msg="StartContainer for \"4863657a6036a101253a8ef09300f99dae3530756e4bd1e3369d74db4ccd25cf\" returns successfully" Jul 15 11:52:29.632000 audit[3799]: AVC avc: denied { search } for pid=3799 comm="nginx" name="crypto" dev="proc" ino=37588 scontext=system_u:system_r:svirt_lxc_net_t:s0:c99,c1019 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 15 11:52:29.632000 audit[3799]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f39c1056728 a2=0 a3=0 items=0 ppid=3643 pid=3799 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c99,c1019 key=(null) Jul 15 11:52:29.632000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 15 11:52:29.784535 env[1245]: time="2025-07-15T11:52:29.784512112Z" level=info msg="StopPodSandbox for \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\"" Jul 15 11:52:29.784842 env[1245]: time="2025-07-15T11:52:29.784602736Z" level=info msg="StopPodSandbox for \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\"" Jul 15 11:52:29.785224 env[1245]: time="2025-07-15T11:52:29.784643008Z" level=info msg="StopPodSandbox for \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\"" Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.854 [INFO][3839] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.854 [INFO][3839] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" iface="eth0" netns="/var/run/netns/cni-6455ac18-7de1-e3ed-1c29-92166df2613b" Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.855 [INFO][3839] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" iface="eth0" netns="/var/run/netns/cni-6455ac18-7de1-e3ed-1c29-92166df2613b" Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.855 [INFO][3839] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" iface="eth0" netns="/var/run/netns/cni-6455ac18-7de1-e3ed-1c29-92166df2613b" Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.855 [INFO][3839] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.855 [INFO][3839] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.886 [INFO][3870] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" HandleID="k8s-pod-network.ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.887 [INFO][3870] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.887 [INFO][3870] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.890 [WARNING][3870] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" HandleID="k8s-pod-network.ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.890 [INFO][3870] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" HandleID="k8s-pod-network.ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.891 [INFO][3870] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:29.894287 env[1245]: 2025-07-15 11:52:29.892 [INFO][3839] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:52:29.894864 env[1245]: time="2025-07-15T11:52:29.894654582Z" level=info msg="TearDown network for sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\" successfully" Jul 15 11:52:29.894864 env[1245]: time="2025-07-15T11:52:29.894676335Z" level=info msg="StopPodSandbox for \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\" returns successfully" Jul 15 11:52:29.895069 env[1245]: time="2025-07-15T11:52:29.895051707Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cd64889bb-t28g6,Uid:deaa84fe-93ef-419a-b53c-7053a343ff7c,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.846 [INFO][3852] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.846 [INFO][3852] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" iface="eth0" netns="/var/run/netns/cni-745796ca-e18a-1eea-613f-43f66a728347" Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.846 [INFO][3852] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" iface="eth0" netns="/var/run/netns/cni-745796ca-e18a-1eea-613f-43f66a728347" Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.847 [INFO][3852] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" iface="eth0" netns="/var/run/netns/cni-745796ca-e18a-1eea-613f-43f66a728347" Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.847 [INFO][3852] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.847 [INFO][3852] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.892 [INFO][3865] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" HandleID="k8s-pod-network.d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.892 [INFO][3865] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.892 [INFO][3865] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.899 [WARNING][3865] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" HandleID="k8s-pod-network.d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.899 [INFO][3865] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" HandleID="k8s-pod-network.d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.900 [INFO][3865] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:29.904855 env[1245]: 2025-07-15 11:52:29.903 [INFO][3852] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:52:29.905667 env[1245]: time="2025-07-15T11:52:29.904964074Z" level=info msg="TearDown network for sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\" successfully" Jul 15 11:52:29.905667 env[1245]: time="2025-07-15T11:52:29.904981397Z" level=info msg="StopPodSandbox for \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\" returns successfully" Jul 15 11:52:29.907251 env[1245]: time="2025-07-15T11:52:29.907202970Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n9wvp,Uid:ce316714-6e1f-490d-9366-973c600e9360,Namespace:calico-system,Attempt:1,}" Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.859 [INFO][3847] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.859 [INFO][3847] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" iface="eth0" netns="/var/run/netns/cni-dcbee61f-c2fc-4906-c7fa-7849888b6759" Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.859 [INFO][3847] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" iface="eth0" netns="/var/run/netns/cni-dcbee61f-c2fc-4906-c7fa-7849888b6759" Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.859 [INFO][3847] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" iface="eth0" netns="/var/run/netns/cni-dcbee61f-c2fc-4906-c7fa-7849888b6759" Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.859 [INFO][3847] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.859 [INFO][3847] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.890 [INFO][3876] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" HandleID="k8s-pod-network.4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.890 [INFO][3876] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.900 [INFO][3876] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.906 [WARNING][3876] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" HandleID="k8s-pod-network.4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.906 [INFO][3876] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" HandleID="k8s-pod-network.4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.907 [INFO][3876] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:29.910328 env[1245]: 2025-07-15 11:52:29.909 [INFO][3847] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:52:29.910966 env[1245]: time="2025-07-15T11:52:29.910950458Z" level=info msg="TearDown network for sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\" successfully" Jul 15 11:52:29.911167 env[1245]: time="2025-07-15T11:52:29.911155234Z" level=info msg="StopPodSandbox for \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\" returns successfully" Jul 15 11:52:29.911465 env[1245]: time="2025-07-15T11:52:29.911452501Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-759464fdbd-cvd46,Uid:12ff45d2-4237-4a75-a49b-5d1934e0deb7,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:52:30.026976 systemd-networkd[1058]: calibd21ab51d78: Link UP Jul 15 11:52:30.028755 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:52:30.029165 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calibd21ab51d78: link becomes ready Jul 15 11:52:30.028860 systemd-networkd[1058]: calibd21ab51d78: Gained carrier Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:29.961 [INFO][3894] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0 calico-apiserver-759464fdbd- calico-apiserver 12ff45d2-4237-4a75-a49b-5d1934e0deb7 927 0 2025-07-15 11:52:01 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:759464fdbd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-759464fdbd-cvd46 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calibd21ab51d78 [] [] }} ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-cvd46" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--cvd46-" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:29.961 [INFO][3894] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-cvd46" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:29.992 [INFO][3920] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" HandleID="k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:29.992 [INFO][3920] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" HandleID="k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d56a0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-759464fdbd-cvd46", "timestamp":"2025-07-15 11:52:29.992805947 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:29.992 [INFO][3920] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:29.993 [INFO][3920] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:29.993 [INFO][3920] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:29.996 [INFO][3920] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" host="localhost" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:29.999 [INFO][3920] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:30.001 [INFO][3920] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:30.002 [INFO][3920] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:30.003 [INFO][3920] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:30.003 [INFO][3920] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" host="localhost" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:30.007 [INFO][3920] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:30.018 [INFO][3920] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" host="localhost" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:30.022 [INFO][3920] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" host="localhost" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:30.022 [INFO][3920] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" host="localhost" Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:30.022 [INFO][3920] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:30.041229 env[1245]: 2025-07-15 11:52:30.022 [INFO][3920] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" HandleID="k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:52:30.041906 env[1245]: 2025-07-15 11:52:30.024 [INFO][3894] cni-plugin/k8s.go 418: Populated endpoint ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-cvd46" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0", GenerateName:"calico-apiserver-759464fdbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"12ff45d2-4237-4a75-a49b-5d1934e0deb7", ResourceVersion:"927", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"759464fdbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-759464fdbd-cvd46", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibd21ab51d78", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:30.041906 env[1245]: 2025-07-15 11:52:30.024 [INFO][3894] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-cvd46" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:52:30.041906 env[1245]: 2025-07-15 11:52:30.024 [INFO][3894] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calibd21ab51d78 ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-cvd46" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:52:30.041906 env[1245]: 2025-07-15 11:52:30.029 [INFO][3894] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-cvd46" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:52:30.041906 env[1245]: 2025-07-15 11:52:30.030 [INFO][3894] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-cvd46" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0", GenerateName:"calico-apiserver-759464fdbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"12ff45d2-4237-4a75-a49b-5d1934e0deb7", ResourceVersion:"927", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"759464fdbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c", Pod:"calico-apiserver-759464fdbd-cvd46", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibd21ab51d78", MAC:"ba:61:ca:3c:29:11", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:30.041906 env[1245]: 2025-07-15 11:52:30.039 [INFO][3894] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-cvd46" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:52:30.057160 env[1245]: time="2025-07-15T11:52:30.057000606Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:30.057160 env[1245]: time="2025-07-15T11:52:30.057056998Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:30.057160 env[1245]: time="2025-07-15T11:52:30.057072522Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:30.057498 env[1245]: time="2025-07-15T11:52:30.057333512Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c pid=3956 runtime=io.containerd.runc.v2 Jul 15 11:52:30.065196 systemd[1]: Started cri-containerd-50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c.scope. Jul 15 11:52:30.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.074000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.074000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit: BPF prog-id=173 op=LOAD Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3956 pid=3964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530626137366561333463303139393538326366356561373266396165 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3956 pid=3964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530626137366561333463303139393538326366356561373266396165 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit: BPF prog-id=174 op=LOAD Jul 15 11:52:30.075000 audit[3964]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003e4a70 items=0 ppid=3956 pid=3964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530626137366561333463303139393538326366356561373266396165 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit: BPF prog-id=175 op=LOAD Jul 15 11:52:30.075000 audit[3964]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003e4ab8 items=0 ppid=3956 pid=3964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530626137366561333463303139393538326366356561373266396165 Jul 15 11:52:30.075000 audit: BPF prog-id=175 op=UNLOAD Jul 15 11:52:30.075000 audit: BPF prog-id=174 op=UNLOAD Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { perfmon } for pid=3964 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit[3964]: AVC avc: denied { bpf } for pid=3964 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.075000 audit: BPF prog-id=176 op=LOAD Jul 15 11:52:30.075000 audit[3964]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003e4ec8 items=0 ppid=3956 pid=3964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.075000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3530626137366561333463303139393538326366356561373266396165 Jul 15 11:52:30.077587 systemd-resolved[1202]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:52:30.100957 env[1245]: time="2025-07-15T11:52:30.100931331Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-759464fdbd-cvd46,Uid:12ff45d2-4237-4a75-a49b-5d1934e0deb7,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c\"" Jul 15 11:52:30.127000 audit[3992]: NETFILTER_CFG table=filter:105 family=2 entries=54 op=nft_register_chain pid=3992 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:30.127000 audit[3992]: SYSCALL arch=c000003e syscall=46 success=yes exit=29396 a0=3 a1=7fff46bd0740 a2=0 a3=7fff46bd072c items=0 ppid=3428 pid=3992 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.127000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:30.132883 systemd-networkd[1058]: caliecb523a9187: Link UP Jul 15 11:52:30.133040 systemd-networkd[1058]: caliecb523a9187: Gained carrier Jul 15 11:52:30.133470 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliecb523a9187: link becomes ready Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:29.960 [INFO][3892] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--n9wvp-eth0 csi-node-driver- calico-system ce316714-6e1f-490d-9366-973c600e9360 925 0 2025-07-15 11:52:03 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:57bd658777 k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-n9wvp eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] caliecb523a9187 [] [] }} ContainerID="e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" Namespace="calico-system" Pod="csi-node-driver-n9wvp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n9wvp-" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:29.960 [INFO][3892] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" Namespace="calico-system" Pod="csi-node-driver-n9wvp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.004 [INFO][3925] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" HandleID="k8s-pod-network.e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.004 [INFO][3925] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" HandleID="k8s-pod-network.e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd020), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-n9wvp", "timestamp":"2025-07-15 11:52:30.004291913 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.004 [INFO][3925] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.022 [INFO][3925] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.022 [INFO][3925] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.101 [INFO][3925] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" host="localhost" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.104 [INFO][3925] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.107 [INFO][3925] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.109 [INFO][3925] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.110 [INFO][3925] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.110 [INFO][3925] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" host="localhost" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.111 [INFO][3925] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.114 [INFO][3925] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" host="localhost" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.121 [INFO][3925] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" host="localhost" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.122 [INFO][3925] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" host="localhost" Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.122 [INFO][3925] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:30.142406 env[1245]: 2025-07-15 11:52:30.122 [INFO][3925] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" HandleID="k8s-pod-network.e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:52:30.142893 env[1245]: 2025-07-15 11:52:30.126 [INFO][3892] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" Namespace="calico-system" Pod="csi-node-driver-n9wvp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n9wvp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n9wvp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ce316714-6e1f-490d-9366-973c600e9360", ResourceVersion:"925", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-n9wvp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"caliecb523a9187", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:30.142893 env[1245]: 2025-07-15 11:52:30.126 [INFO][3892] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" Namespace="calico-system" Pod="csi-node-driver-n9wvp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:52:30.142893 env[1245]: 2025-07-15 11:52:30.126 [INFO][3892] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliecb523a9187 ContainerID="e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" Namespace="calico-system" Pod="csi-node-driver-n9wvp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:52:30.142893 env[1245]: 2025-07-15 11:52:30.132 [INFO][3892] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" Namespace="calico-system" Pod="csi-node-driver-n9wvp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:52:30.142893 env[1245]: 2025-07-15 11:52:30.134 [INFO][3892] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" Namespace="calico-system" Pod="csi-node-driver-n9wvp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n9wvp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n9wvp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ce316714-6e1f-490d-9366-973c600e9360", ResourceVersion:"925", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc", Pod:"csi-node-driver-n9wvp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"caliecb523a9187", MAC:"26:79:d4:42:6e:80", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:30.142893 env[1245]: 2025-07-15 11:52:30.141 [INFO][3892] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc" Namespace="calico-system" Pod="csi-node-driver-n9wvp" WorkloadEndpoint="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:52:30.154281 env[1245]: time="2025-07-15T11:52:30.154170590Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:30.154281 env[1245]: time="2025-07-15T11:52:30.154197774Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:30.154281 env[1245]: time="2025-07-15T11:52:30.154204931Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:30.154408 env[1245]: time="2025-07-15T11:52:30.154343252Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc pid=4009 runtime=io.containerd.runc.v2 Jul 15 11:52:30.152000 audit[4010]: NETFILTER_CFG table=filter:106 family=2 entries=44 op=nft_register_chain pid=4010 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:30.152000 audit[4010]: SYSCALL arch=c000003e syscall=46 success=yes exit=21952 a0=3 a1=7ffd0bd8c6e0 a2=0 a3=7ffd0bd8c6cc items=0 ppid=3428 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.152000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:30.162506 systemd[1]: Started cri-containerd-e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc.scope. Jul 15 11:52:30.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit: BPF prog-id=177 op=LOAD Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4009 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531663132323336376437653563373435613661396661306366623262 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4009 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531663132323336376437653563373435613661396661306366623262 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit: BPF prog-id=178 op=LOAD Jul 15 11:52:30.171000 audit[4020]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000220f10 items=0 ppid=4009 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531663132323336376437653563373435613661396661306366623262 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit: BPF prog-id=179 op=LOAD Jul 15 11:52:30.171000 audit[4020]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000220f58 items=0 ppid=4009 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531663132323336376437653563373435613661396661306366623262 Jul 15 11:52:30.171000 audit: BPF prog-id=179 op=UNLOAD Jul 15 11:52:30.171000 audit: BPF prog-id=178 op=UNLOAD Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { perfmon } for pid=4020 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit[4020]: AVC avc: denied { bpf } for pid=4020 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.171000 audit: BPF prog-id=180 op=LOAD Jul 15 11:52:30.171000 audit[4020]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000221368 items=0 ppid=4009 pid=4020 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.171000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531663132323336376437653563373435613661396661306366623262 Jul 15 11:52:30.175038 systemd-resolved[1202]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:52:30.181938 env[1245]: time="2025-07-15T11:52:30.181909332Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-n9wvp,Uid:ce316714-6e1f-490d-9366-973c600e9360,Namespace:calico-system,Attempt:1,} returns sandbox id \"e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc\"" Jul 15 11:52:30.222510 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali956d64c26a4: link becomes ready Jul 15 11:52:30.222623 systemd-networkd[1058]: cali956d64c26a4: Link UP Jul 15 11:52:30.222735 systemd-networkd[1058]: cali956d64c26a4: Gained carrier Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:29.976 [INFO][3886] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0 calico-apiserver-cd64889bb- calico-apiserver deaa84fe-93ef-419a-b53c-7053a343ff7c 926 0 2025-07-15 11:52:01 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:cd64889bb projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-cd64889bb-t28g6 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali956d64c26a4 [] [] }} ContainerID="aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-t28g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--t28g6-" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:29.976 [INFO][3886] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-t28g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.021 [INFO][3932] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" HandleID="k8s-pod-network.aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.022 [INFO][3932] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" HandleID="k8s-pod-network.aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000250ff0), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-cd64889bb-t28g6", "timestamp":"2025-07-15 11:52:30.021985933 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.022 [INFO][3932] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.122 [INFO][3932] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.122 [INFO][3932] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.197 [INFO][3932] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" host="localhost" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.205 [INFO][3932] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.207 [INFO][3932] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.209 [INFO][3932] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.210 [INFO][3932] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.210 [INFO][3932] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" host="localhost" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.211 [INFO][3932] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938 Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.214 [INFO][3932] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" host="localhost" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.217 [INFO][3932] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" host="localhost" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.217 [INFO][3932] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" host="localhost" Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.217 [INFO][3932] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:30.237808 env[1245]: 2025-07-15 11:52:30.217 [INFO][3932] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" HandleID="k8s-pod-network.aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:52:30.238300 env[1245]: 2025-07-15 11:52:30.219 [INFO][3886] cni-plugin/k8s.go 418: Populated endpoint ContainerID="aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-t28g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0", GenerateName:"calico-apiserver-cd64889bb-", Namespace:"calico-apiserver", SelfLink:"", UID:"deaa84fe-93ef-419a-b53c-7053a343ff7c", ResourceVersion:"926", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cd64889bb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-cd64889bb-t28g6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali956d64c26a4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:30.238300 env[1245]: 2025-07-15 11:52:30.219 [INFO][3886] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-t28g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:52:30.238300 env[1245]: 2025-07-15 11:52:30.219 [INFO][3886] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali956d64c26a4 ContainerID="aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-t28g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:52:30.238300 env[1245]: 2025-07-15 11:52:30.222 [INFO][3886] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-t28g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:52:30.238300 env[1245]: 2025-07-15 11:52:30.228 [INFO][3886] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-t28g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0", GenerateName:"calico-apiserver-cd64889bb-", Namespace:"calico-apiserver", SelfLink:"", UID:"deaa84fe-93ef-419a-b53c-7053a343ff7c", ResourceVersion:"926", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cd64889bb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938", Pod:"calico-apiserver-cd64889bb-t28g6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali956d64c26a4", MAC:"16:37:13:1d:fb:02", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:30.238300 env[1245]: 2025-07-15 11:52:30.236 [INFO][3886] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-t28g6" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:52:30.248627 env[1245]: time="2025-07-15T11:52:30.248588445Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:30.248719 env[1245]: time="2025-07-15T11:52:30.248630575Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:30.248719 env[1245]: time="2025-07-15T11:52:30.248655511Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:30.248844 env[1245]: time="2025-07-15T11:52:30.248750090Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938 pid=4058 runtime=io.containerd.runc.v2 Jul 15 11:52:30.249000 audit[4068]: NETFILTER_CFG table=filter:107 family=2 entries=55 op=nft_register_chain pid=4068 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:30.249000 audit[4068]: SYSCALL arch=c000003e syscall=46 success=yes exit=28304 a0=3 a1=7ffd138d38c0 a2=0 a3=7ffd138d38ac items=0 ppid=3428 pid=4068 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.249000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:30.259089 systemd[1]: Started cri-containerd-aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938.scope. Jul 15 11:52:30.271223 systemd[1]: run-containerd-runc-k8s.io-4863657a6036a101253a8ef09300f99dae3530756e4bd1e3369d74db4ccd25cf-runc.SaWGIE.mount: Deactivated successfully. Jul 15 11:52:30.271278 systemd[1]: run-netns-cni\x2d745796ca\x2de18a\x2d1eea\x2d613f\x2d43f66a728347.mount: Deactivated successfully. Jul 15 11:52:30.271310 systemd[1]: run-netns-cni\x2d6455ac18\x2d7de1\x2de3ed\x2d1c29\x2d92166df2613b.mount: Deactivated successfully. Jul 15 11:52:30.271341 systemd[1]: run-netns-cni\x2ddcbee61f\x2dc2fc\x2d4906\x2dc7fa\x2d7849888b6759.mount: Deactivated successfully. Jul 15 11:52:30.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.276000 audit: BPF prog-id=181 op=LOAD Jul 15 11:52:30.276000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.276000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4058 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.276000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165653563386634323732646661643264383661663532643838303830 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4058 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165653563386634323732646661643264383661663532643838303830 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit: BPF prog-id=182 op=LOAD Jul 15 11:52:30.277000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c0000ab350 items=0 ppid=4058 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165653563386634323732646661643264383661663532643838303830 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit: BPF prog-id=183 op=LOAD Jul 15 11:52:30.277000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c0000ab398 items=0 ppid=4058 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165653563386634323732646661643264383661663532643838303830 Jul 15 11:52:30.277000 audit: BPF prog-id=183 op=UNLOAD Jul 15 11:52:30.277000 audit: BPF prog-id=182 op=UNLOAD Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { perfmon } for pid=4071 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit[4071]: AVC avc: denied { bpf } for pid=4071 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:30.277000 audit: BPF prog-id=184 op=LOAD Jul 15 11:52:30.277000 audit[4071]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c0000ab7a8 items=0 ppid=4058 pid=4071 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:30.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6165653563386634323732646661643264383661663532643838303830 Jul 15 11:52:30.279132 systemd-resolved[1202]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:52:30.301138 env[1245]: time="2025-07-15T11:52:30.301108508Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cd64889bb-t28g6,Uid:deaa84fe-93ef-419a-b53c-7053a343ff7c,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938\"" Jul 15 11:52:30.813623 env[1245]: time="2025-07-15T11:52:30.813595278Z" level=info msg="StopPodSandbox for \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\"" Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.860 [INFO][4103] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.860 [INFO][4103] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" iface="eth0" netns="/var/run/netns/cni-3edf3908-70f4-f8c2-1cad-7cbab952b73d" Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.861 [INFO][4103] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" iface="eth0" netns="/var/run/netns/cni-3edf3908-70f4-f8c2-1cad-7cbab952b73d" Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.861 [INFO][4103] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" iface="eth0" netns="/var/run/netns/cni-3edf3908-70f4-f8c2-1cad-7cbab952b73d" Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.861 [INFO][4103] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.861 [INFO][4103] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.892 [INFO][4110] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" HandleID="k8s-pod-network.9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.892 [INFO][4110] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.892 [INFO][4110] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.898 [WARNING][4110] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" HandleID="k8s-pod-network.9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.898 [INFO][4110] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" HandleID="k8s-pod-network.9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.900 [INFO][4110] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:30.910345 env[1245]: 2025-07-15 11:52:30.901 [INFO][4103] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:52:30.915126 env[1245]: time="2025-07-15T11:52:30.911632564Z" level=info msg="TearDown network for sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\" successfully" Jul 15 11:52:30.915126 env[1245]: time="2025-07-15T11:52:30.911657244Z" level=info msg="StopPodSandbox for \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\" returns successfully" Jul 15 11:52:30.915126 env[1245]: time="2025-07-15T11:52:30.912079403Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6cdcfb8994-hqlqp,Uid:120c9d9a-979f-4c42-8753-ad82a94c699a,Namespace:calico-system,Attempt:1,}" Jul 15 11:52:30.913198 systemd[1]: run-netns-cni\x2d3edf3908\x2d70f4\x2df8c2\x2d1cad\x2d7cbab952b73d.mount: Deactivated successfully. Jul 15 11:52:30.962746 systemd-networkd[1058]: califb771d6bdae: Gained IPv6LL Jul 15 11:52:31.092534 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:52:31.092608 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali9dba86c2343: link becomes ready Jul 15 11:52:31.091660 systemd-networkd[1058]: cali9dba86c2343: Link UP Jul 15 11:52:31.092396 systemd-networkd[1058]: cali9dba86c2343: Gained carrier Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.015 [INFO][4116] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0 calico-kube-controllers-6cdcfb8994- calico-system 120c9d9a-979f-4c42-8753-ad82a94c699a 942 0 2025-07-15 11:52:03 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:6cdcfb8994 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-6cdcfb8994-hqlqp eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali9dba86c2343 [] [] }} ContainerID="2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" Namespace="calico-system" Pod="calico-kube-controllers-6cdcfb8994-hqlqp" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.015 [INFO][4116] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" Namespace="calico-system" Pod="calico-kube-controllers-6cdcfb8994-hqlqp" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.053 [INFO][4130] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" HandleID="k8s-pod-network.2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.053 [INFO][4130] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" HandleID="k8s-pod-network.2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000325720), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-6cdcfb8994-hqlqp", "timestamp":"2025-07-15 11:52:31.053888682 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.054 [INFO][4130] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.054 [INFO][4130] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.054 [INFO][4130] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.060 [INFO][4130] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" host="localhost" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.065 [INFO][4130] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.068 [INFO][4130] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.069 [INFO][4130] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.073 [INFO][4130] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.073 [INFO][4130] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" host="localhost" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.074 [INFO][4130] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873 Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.079 [INFO][4130] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" host="localhost" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.086 [INFO][4130] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" host="localhost" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.086 [INFO][4130] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" host="localhost" Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.086 [INFO][4130] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:31.104807 env[1245]: 2025-07-15 11:52:31.086 [INFO][4130] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" HandleID="k8s-pod-network.2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:52:31.105297 env[1245]: 2025-07-15 11:52:31.088 [INFO][4116] cni-plugin/k8s.go 418: Populated endpoint ContainerID="2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" Namespace="calico-system" Pod="calico-kube-controllers-6cdcfb8994-hqlqp" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0", GenerateName:"calico-kube-controllers-6cdcfb8994-", Namespace:"calico-system", SelfLink:"", UID:"120c9d9a-979f-4c42-8753-ad82a94c699a", ResourceVersion:"942", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6cdcfb8994", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-6cdcfb8994-hqlqp", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9dba86c2343", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:31.105297 env[1245]: 2025-07-15 11:52:31.088 [INFO][4116] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" Namespace="calico-system" Pod="calico-kube-controllers-6cdcfb8994-hqlqp" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:52:31.105297 env[1245]: 2025-07-15 11:52:31.088 [INFO][4116] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali9dba86c2343 ContainerID="2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" Namespace="calico-system" Pod="calico-kube-controllers-6cdcfb8994-hqlqp" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:52:31.105297 env[1245]: 2025-07-15 11:52:31.093 [INFO][4116] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" Namespace="calico-system" Pod="calico-kube-controllers-6cdcfb8994-hqlqp" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:52:31.105297 env[1245]: 2025-07-15 11:52:31.093 [INFO][4116] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" Namespace="calico-system" Pod="calico-kube-controllers-6cdcfb8994-hqlqp" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0", GenerateName:"calico-kube-controllers-6cdcfb8994-", Namespace:"calico-system", SelfLink:"", UID:"120c9d9a-979f-4c42-8753-ad82a94c699a", ResourceVersion:"942", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6cdcfb8994", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873", Pod:"calico-kube-controllers-6cdcfb8994-hqlqp", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9dba86c2343", MAC:"26:e2:91:5f:f0:fb", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:31.105297 env[1245]: 2025-07-15 11:52:31.100 [INFO][4116] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873" Namespace="calico-system" Pod="calico-kube-controllers-6cdcfb8994-hqlqp" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:52:31.117000 audit[4141]: NETFILTER_CFG table=filter:108 family=2 entries=40 op=nft_register_chain pid=4141 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:31.117000 audit[4141]: SYSCALL arch=c000003e syscall=46 success=yes exit=20784 a0=3 a1=7ffe272307a0 a2=0 a3=7ffe2723078c items=0 ppid=3428 pid=4141 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:31.117000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:31.148831 env[1245]: time="2025-07-15T11:52:31.148782410Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:31.148942 env[1245]: time="2025-07-15T11:52:31.148817732Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:31.148942 env[1245]: time="2025-07-15T11:52:31.148826343Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:31.149175 env[1245]: time="2025-07-15T11:52:31.149152557Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873 pid=4153 runtime=io.containerd.runc.v2 Jul 15 11:52:31.164891 systemd[1]: Started cri-containerd-2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873.scope. Jul 15 11:52:31.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.187000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.187000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.187000 audit: BPF prog-id=185 op=LOAD Jul 15 11:52:31.190000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.190000 audit[4163]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4153 pid=4163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:31.190000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265663061393164386335366639326363633432393236623731613337 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4153 pid=4163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:31.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265663061393164386335366639326363633432393236623731613337 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit: BPF prog-id=186 op=LOAD Jul 15 11:52:31.191000 audit[4163]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000298bf0 items=0 ppid=4153 pid=4163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:31.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265663061393164386335366639326363633432393236623731613337 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit: BPF prog-id=187 op=LOAD Jul 15 11:52:31.191000 audit[4163]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000298c38 items=0 ppid=4153 pid=4163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:31.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265663061393164386335366639326363633432393236623731613337 Jul 15 11:52:31.191000 audit: BPF prog-id=187 op=UNLOAD Jul 15 11:52:31.191000 audit: BPF prog-id=186 op=UNLOAD Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { perfmon } for pid=4163 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit[4163]: AVC avc: denied { bpf } for pid=4163 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:31.191000 audit: BPF prog-id=188 op=LOAD Jul 15 11:52:31.191000 audit[4163]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000299048 items=0 ppid=4153 pid=4163 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:31.191000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3265663061393164386335366639326363633432393236623731613337 Jul 15 11:52:31.194021 systemd-resolved[1202]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:52:31.231333 env[1245]: time="2025-07-15T11:52:31.231300436Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-6cdcfb8994-hqlqp,Uid:120c9d9a-979f-4c42-8753-ad82a94c699a,Namespace:calico-system,Attempt:1,} returns sandbox id \"2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873\"" Jul 15 11:52:31.407681 systemd-networkd[1058]: cali956d64c26a4: Gained IPv6LL Jul 15 11:52:31.408114 systemd-networkd[1058]: calibd21ab51d78: Gained IPv6LL Jul 15 11:52:31.784227 env[1245]: time="2025-07-15T11:52:31.784191378Z" level=info msg="StopPodSandbox for \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\"" Jul 15 11:52:31.784404 env[1245]: time="2025-07-15T11:52:31.784386263Z" level=info msg="StopPodSandbox for \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\"" Jul 15 11:52:31.784759 env[1245]: time="2025-07-15T11:52:31.784187728Z" level=info msg="StopPodSandbox for \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\"" Jul 15 11:52:32.047563 systemd-networkd[1058]: caliecb523a9187: Gained IPv6LL Jul 15 11:52:32.434229 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount289342994.mount: Deactivated successfully. Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.345 [INFO][4229] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.345 [INFO][4229] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" iface="eth0" netns="/var/run/netns/cni-68d1b54e-fbd3-ddb5-36ed-4351c2d6b7d1" Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.345 [INFO][4229] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" iface="eth0" netns="/var/run/netns/cni-68d1b54e-fbd3-ddb5-36ed-4351c2d6b7d1" Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.345 [INFO][4229] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" iface="eth0" netns="/var/run/netns/cni-68d1b54e-fbd3-ddb5-36ed-4351c2d6b7d1" Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.345 [INFO][4229] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.345 [INFO][4229] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.476 [INFO][4247] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" HandleID="k8s-pod-network.5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.476 [INFO][4247] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.480 [INFO][4247] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.483 [WARNING][4247] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" HandleID="k8s-pod-network.5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.483 [INFO][4247] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" HandleID="k8s-pod-network.5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.484 [INFO][4247] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:32.491100 env[1245]: 2025-07-15 11:52:32.487 [INFO][4229] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.315 [INFO][4230] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.315 [INFO][4230] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" iface="eth0" netns="/var/run/netns/cni-75883a07-779a-cc8b-a625-cef663c938f6" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.316 [INFO][4230] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" iface="eth0" netns="/var/run/netns/cni-75883a07-779a-cc8b-a625-cef663c938f6" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.329 [INFO][4230] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" iface="eth0" netns="/var/run/netns/cni-75883a07-779a-cc8b-a625-cef663c938f6" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.329 [INFO][4230] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.329 [INFO][4230] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.474 [INFO][4245] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" HandleID="k8s-pod-network.b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.475 [INFO][4245] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.475 [INFO][4245] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.479 [WARNING][4245] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" HandleID="k8s-pod-network.b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.479 [INFO][4245] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" HandleID="k8s-pod-network.b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.480 [INFO][4245] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.486 [INFO][4230] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.315 [INFO][4224] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.315 [INFO][4224] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" iface="eth0" netns="/var/run/netns/cni-35c9a85f-1db5-e200-bfe8-71312f0895b6" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.315 [INFO][4224] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" iface="eth0" netns="/var/run/netns/cni-35c9a85f-1db5-e200-bfe8-71312f0895b6" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.316 [INFO][4224] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" iface="eth0" netns="/var/run/netns/cni-35c9a85f-1db5-e200-bfe8-71312f0895b6" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.316 [INFO][4224] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.316 [INFO][4224] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.480 [INFO][4243] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" HandleID="k8s-pod-network.a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.480 [INFO][4243] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.484 [INFO][4243] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.489 [WARNING][4243] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" HandleID="k8s-pod-network.a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.489 [INFO][4243] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" HandleID="k8s-pod-network.a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.491 [INFO][4243] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:32.498154 env[1245]: 2025-07-15 11:52:32.492 [INFO][4224] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:52:32.505910 systemd[1]: run-netns-cni\x2d68d1b54e\x2dfbd3\x2dddb5\x2d36ed\x2d4351c2d6b7d1.mount: Deactivated successfully. Jul 15 11:52:32.507914 systemd[1]: run-netns-cni\x2d75883a07\x2d779a\x2dcc8b\x2da625\x2dcef663c938f6.mount: Deactivated successfully. Jul 15 11:52:32.514468 env[1245]: time="2025-07-15T11:52:32.510282591Z" level=info msg="TearDown network for sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\" successfully" Jul 15 11:52:32.514468 env[1245]: time="2025-07-15T11:52:32.510307595Z" level=info msg="StopPodSandbox for \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\" returns successfully" Jul 15 11:52:32.514468 env[1245]: time="2025-07-15T11:52:32.511535505Z" level=info msg="TearDown network for sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\" successfully" Jul 15 11:52:32.514468 env[1245]: time="2025-07-15T11:52:32.511549745Z" level=info msg="StopPodSandbox for \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\" returns successfully" Jul 15 11:52:32.514468 env[1245]: time="2025-07-15T11:52:32.511631277Z" level=info msg="TearDown network for sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\" successfully" Jul 15 11:52:32.514468 env[1245]: time="2025-07-15T11:52:32.511641781Z" level=info msg="StopPodSandbox for \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\" returns successfully" Jul 15 11:52:32.514468 env[1245]: time="2025-07-15T11:52:32.513673091Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-759464fdbd-8t76s,Uid:1b0b115b-c4c6-4d3f-942e-84cda13fa272,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:52:32.510355 systemd[1]: run-netns-cni\x2d35c9a85f\x2d1db5\x2de200\x2dbfe8\x2d71312f0895b6.mount: Deactivated successfully. Jul 15 11:52:32.533357 env[1245]: time="2025-07-15T11:52:32.533327948Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-8mq62,Uid:3a284661-8d5c-4ec1-96bf-0c0515e97469,Namespace:kube-system,Attempt:1,}" Jul 15 11:52:32.533527 env[1245]: time="2025-07-15T11:52:32.533510674Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jcf2z,Uid:19fff0c9-96cf-4668-96d3-25fbced73cfb,Namespace:kube-system,Attempt:1,}" Jul 15 11:52:32.687898 systemd-networkd[1058]: cali9dba86c2343: Gained IPv6LL Jul 15 11:52:33.142780 systemd-networkd[1058]: cali1b20d4e12d4: Link UP Jul 15 11:52:33.145666 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:52:33.148969 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali1b20d4e12d4: link becomes ready Jul 15 11:52:33.145852 systemd-networkd[1058]: cali1b20d4e12d4: Gained carrier Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.035 [INFO][4267] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0 coredns-7c65d6cfc9- kube-system 19fff0c9-96cf-4668-96d3-25fbced73cfb 955 0 2025-07-15 11:51:53 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-jcf2z eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali1b20d4e12d4 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jcf2z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jcf2z-" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.035 [INFO][4267] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jcf2z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.100 [INFO][4309] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" HandleID="k8s-pod-network.d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.100 [INFO][4309] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" HandleID="k8s-pod-network.d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002ccff0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-jcf2z", "timestamp":"2025-07-15 11:52:33.100469913 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.100 [INFO][4309] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.100 [INFO][4309] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.100 [INFO][4309] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.104 [INFO][4309] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" host="localhost" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.106 [INFO][4309] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.109 [INFO][4309] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.110 [INFO][4309] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.111 [INFO][4309] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.111 [INFO][4309] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" host="localhost" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.113 [INFO][4309] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.130 [INFO][4309] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" host="localhost" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.136 [INFO][4309] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" host="localhost" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.136 [INFO][4309] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" host="localhost" Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.136 [INFO][4309] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:33.163036 env[1245]: 2025-07-15 11:52:33.136 [INFO][4309] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" HandleID="k8s-pod-network.d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:52:33.173609 env[1245]: 2025-07-15 11:52:33.138 [INFO][4267] cni-plugin/k8s.go 418: Populated endpoint ContainerID="d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jcf2z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"19fff0c9-96cf-4668-96d3-25fbced73cfb", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 51, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-jcf2z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1b20d4e12d4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:33.173609 env[1245]: 2025-07-15 11:52:33.138 [INFO][4267] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jcf2z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:52:33.173609 env[1245]: 2025-07-15 11:52:33.138 [INFO][4267] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali1b20d4e12d4 ContainerID="d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jcf2z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:52:33.173609 env[1245]: 2025-07-15 11:52:33.146 [INFO][4267] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jcf2z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:52:33.173609 env[1245]: 2025-07-15 11:52:33.146 [INFO][4267] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jcf2z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"19fff0c9-96cf-4668-96d3-25fbced73cfb", ResourceVersion:"955", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 51, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f", Pod:"coredns-7c65d6cfc9-jcf2z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1b20d4e12d4", MAC:"4a:54:c3:84:9a:0d", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:33.173609 env[1245]: 2025-07-15 11:52:33.161 [INFO][4267] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f" Namespace="kube-system" Pod="coredns-7c65d6cfc9-jcf2z" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:52:33.250000 audit[4349]: NETFILTER_CFG table=filter:109 family=2 entries=54 op=nft_register_chain pid=4349 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:33.250000 audit[4349]: SYSCALL arch=c000003e syscall=46 success=yes exit=26100 a0=3 a1=7ffc038dc880 a2=0 a3=7ffc038dc86c items=0 ppid=3428 pid=4349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.250000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:33.265843 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali764f7c218ea: link becomes ready Jul 15 11:52:33.264998 systemd-networkd[1058]: cali764f7c218ea: Link UP Jul 15 11:52:33.265108 systemd-networkd[1058]: cali764f7c218ea: Gained carrier Jul 15 11:52:33.266152 env[1245]: time="2025-07-15T11:52:33.247296698Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:33.266152 env[1245]: time="2025-07-15T11:52:33.247340209Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:33.266152 env[1245]: time="2025-07-15T11:52:33.247347382Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:33.266152 env[1245]: time="2025-07-15T11:52:33.247471927Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f pid=4340 runtime=io.containerd.runc.v2 Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:32.996 [INFO][4263] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0 calico-apiserver-759464fdbd- calico-apiserver 1b0b115b-c4c6-4d3f-942e-84cda13fa272 953 0 2025-07-15 11:52:01 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:759464fdbd projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-759464fdbd-8t76s eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali764f7c218ea [] [] }} ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-8t76s" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--8t76s-" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:32.996 [INFO][4263] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-8t76s" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.103 [INFO][4295] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.103 [INFO][4295] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00004fe10), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-759464fdbd-8t76s", "timestamp":"2025-07-15 11:52:33.103232571 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.103 [INFO][4295] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.137 [INFO][4295] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.137 [INFO][4295] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.205 [INFO][4295] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" host="localhost" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.212 [INFO][4295] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.214 [INFO][4295] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.216 [INFO][4295] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.220 [INFO][4295] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.220 [INFO][4295] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" host="localhost" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.222 [INFO][4295] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6 Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.235 [INFO][4295] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" host="localhost" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.258 [INFO][4295] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" host="localhost" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.258 [INFO][4295] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" host="localhost" Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.258 [INFO][4295] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:33.277665 env[1245]: 2025-07-15 11:52:33.258 [INFO][4295] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:33.293000 audit[4368]: NETFILTER_CFG table=filter:110 family=2 entries=53 op=nft_register_chain pid=4368 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:33.293000 audit[4368]: SYSCALL arch=c000003e syscall=46 success=yes exit=26624 a0=3 a1=7ffceada9b60 a2=0 a3=7ffceada9b4c items=0 ppid=3428 pid=4368 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.293000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:33.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit: BPF prog-id=189 op=LOAD Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[4357]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=4340 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437613533613563336363363334383536386663343662393437666262 Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[4357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=4340 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437613533613563336363363334383536386663343662393437666262 Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.320000 audit: BPF prog-id=190 op=LOAD Jul 15 11:52:33.320000 audit[4357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c0003f80b0 items=0 ppid=4340 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.320000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437613533613563336363363334383536386663343662393437666262 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit: BPF prog-id=191 op=LOAD Jul 15 11:52:33.321000 audit[4357]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0003f80f8 items=0 ppid=4340 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437613533613563336363363334383536386663343662393437666262 Jul 15 11:52:33.321000 audit: BPF prog-id=191 op=UNLOAD Jul 15 11:52:33.321000 audit: BPF prog-id=190 op=UNLOAD Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { perfmon } for pid=4357 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit[4357]: AVC avc: denied { bpf } for pid=4357 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.321000 audit: BPF prog-id=192 op=LOAD Jul 15 11:52:33.321000 audit[4357]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003f8508 items=0 ppid=4340 pid=4357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.321000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6437613533613563336363363334383536386663343662393437666262 Jul 15 11:52:33.339662 env[1245]: 2025-07-15 11:52:33.259 [INFO][4263] cni-plugin/k8s.go 418: Populated endpoint ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-8t76s" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0", GenerateName:"calico-apiserver-759464fdbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b0b115b-c4c6-4d3f-942e-84cda13fa272", ResourceVersion:"953", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"759464fdbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-759464fdbd-8t76s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali764f7c218ea", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:33.339662 env[1245]: 2025-07-15 11:52:33.259 [INFO][4263] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-8t76s" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:33.339662 env[1245]: 2025-07-15 11:52:33.259 [INFO][4263] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali764f7c218ea ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-8t76s" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:33.339662 env[1245]: 2025-07-15 11:52:33.261 [INFO][4263] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-8t76s" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:33.339662 env[1245]: 2025-07-15 11:52:33.261 [INFO][4263] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-8t76s" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0", GenerateName:"calico-apiserver-759464fdbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b0b115b-c4c6-4d3f-942e-84cda13fa272", ResourceVersion:"953", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"759464fdbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6", Pod:"calico-apiserver-759464fdbd-8t76s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali764f7c218ea", MAC:"6e:e0:3d:52:fb:2c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:33.339662 env[1245]: 2025-07-15 11:52:33.275 [INFO][4263] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Namespace="calico-apiserver" Pod="calico-apiserver-759464fdbd-8t76s" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:33.294548 systemd[1]: Started cri-containerd-d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f.scope. Jul 15 11:52:33.325837 systemd-resolved[1202]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:52:33.360874 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali4b12e30c640: link becomes ready Jul 15 11:52:33.359051 systemd-networkd[1058]: cali4b12e30c640: Link UP Jul 15 11:52:33.359158 systemd-networkd[1058]: cali4b12e30c640: Gained carrier Jul 15 11:52:33.372355 env[1245]: time="2025-07-15T11:52:33.367287980Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-jcf2z,Uid:19fff0c9-96cf-4668-96d3-25fbced73cfb,Namespace:kube-system,Attempt:1,} returns sandbox id \"d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f\"" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.085 [INFO][4274] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0 coredns-7c65d6cfc9- kube-system 3a284661-8d5c-4ec1-96bf-0c0515e97469 954 0 2025-07-15 11:51:53 +0000 UTC map[k8s-app:kube-dns pod-template-hash:7c65d6cfc9 projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-7c65d6cfc9-8mq62 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali4b12e30c640 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8mq62" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8mq62-" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.085 [INFO][4274] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8mq62" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.167 [INFO][4318] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" HandleID="k8s-pod-network.a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.167 [INFO][4318] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" HandleID="k8s-pod-network.a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251610), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-7c65d6cfc9-8mq62", "timestamp":"2025-07-15 11:52:33.167320345 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.168 [INFO][4318] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.258 [INFO][4318] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.269 [INFO][4318] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.311 [INFO][4318] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" host="localhost" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.315 [INFO][4318] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.317 [INFO][4318] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.318 [INFO][4318] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.321 [INFO][4318] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.321 [INFO][4318] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" host="localhost" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.322 [INFO][4318] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.330 [INFO][4318] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" host="localhost" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.354 [INFO][4318] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" host="localhost" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.354 [INFO][4318] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" host="localhost" Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.354 [INFO][4318] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:33.400793 env[1245]: 2025-07-15 11:52:33.354 [INFO][4318] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" HandleID="k8s-pod-network.a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:52:33.401509 env[1245]: 2025-07-15 11:52:33.355 [INFO][4274] cni-plugin/k8s.go 418: Populated endpoint ContainerID="a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8mq62" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3a284661-8d5c-4ec1-96bf-0c0515e97469", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 51, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-7c65d6cfc9-8mq62", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b12e30c640", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:33.401509 env[1245]: 2025-07-15 11:52:33.355 [INFO][4274] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8mq62" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:52:33.401509 env[1245]: 2025-07-15 11:52:33.356 [INFO][4274] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali4b12e30c640 ContainerID="a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8mq62" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:52:33.401509 env[1245]: 2025-07-15 11:52:33.358 [INFO][4274] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8mq62" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:52:33.401509 env[1245]: 2025-07-15 11:52:33.358 [INFO][4274] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8mq62" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3a284661-8d5c-4ec1-96bf-0c0515e97469", ResourceVersion:"954", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 51, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e", Pod:"coredns-7c65d6cfc9-8mq62", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b12e30c640", MAC:"b2:06:f2:2a:27:44", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:33.401509 env[1245]: 2025-07-15 11:52:33.399 [INFO][4274] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e" Namespace="kube-system" Pod="coredns-7c65d6cfc9-8mq62" WorkloadEndpoint="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:52:33.420000 audit[4399]: NETFILTER_CFG table=filter:111 family=2 entries=52 op=nft_register_chain pid=4399 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:33.420000 audit[4399]: SYSCALL arch=c000003e syscall=46 success=yes exit=23892 a0=3 a1=7ffe84101b10 a2=0 a3=7ffe84101afc items=0 ppid=3428 pid=4399 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.420000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:33.492343 env[1245]: time="2025-07-15T11:52:33.492224265Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:33.492343 env[1245]: time="2025-07-15T11:52:33.492249125Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:33.492343 env[1245]: time="2025-07-15T11:52:33.492256156Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:33.492610 env[1245]: time="2025-07-15T11:52:33.492364464Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6 pid=4408 runtime=io.containerd.runc.v2 Jul 15 11:52:33.514880 systemd[1]: run-containerd-runc-k8s.io-279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6-runc.4qANh3.mount: Deactivated successfully. Jul 15 11:52:33.517931 systemd[1]: Started cri-containerd-279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6.scope. Jul 15 11:52:33.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.533000 audit: BPF prog-id=193 op=LOAD Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=4408 pid=4416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237396566323361626539386464396165646331376234363837326530 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=c items=0 ppid=4408 pid=4416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237396566323361626539386464396165646331376234363837326530 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit: BPF prog-id=194 op=LOAD Jul 15 11:52:33.534000 audit[4416]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c0002cbce0 items=0 ppid=4408 pid=4416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237396566323361626539386464396165646331376234363837326530 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.534000 audit: BPF prog-id=195 op=LOAD Jul 15 11:52:33.534000 audit[4416]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c0002cbd28 items=0 ppid=4408 pid=4416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.534000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237396566323361626539386464396165646331376234363837326530 Jul 15 11:52:33.535000 audit: BPF prog-id=195 op=UNLOAD Jul 15 11:52:33.535000 audit: BPF prog-id=194 op=UNLOAD Jul 15 11:52:33.535000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.535000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.535000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.535000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.535000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.535000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.535000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.535000 audit[4416]: AVC avc: denied { perfmon } for pid=4416 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.535000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.535000 audit[4416]: AVC avc: denied { bpf } for pid=4416 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.535000 audit: BPF prog-id=196 op=LOAD Jul 15 11:52:33.535000 audit[4416]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c000350138 items=0 ppid=4408 pid=4416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.535000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237396566323361626539386464396165646331376234363837326530 Jul 15 11:52:33.541976 systemd-resolved[1202]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:52:33.571397 env[1245]: time="2025-07-15T11:52:33.544002319Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:33.571397 env[1245]: time="2025-07-15T11:52:33.544037177Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:33.571397 env[1245]: time="2025-07-15T11:52:33.544045362Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:33.571397 env[1245]: time="2025-07-15T11:52:33.544144033Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e pid=4438 runtime=io.containerd.runc.v2 Jul 15 11:52:33.567391 systemd[1]: Started cri-containerd-a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e.scope. Jul 15 11:52:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.591000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.591000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.591000 audit: BPF prog-id=197 op=LOAD Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4438 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139303434353935356337666335373462653963633536313461373566 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4438 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139303434353935356337666335373462653963633536313461373566 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit: BPF prog-id=198 op=LOAD Jul 15 11:52:33.592000 audit[4449]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000410540 items=0 ppid=4438 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139303434353935356337666335373462653963633536313461373566 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit: BPF prog-id=199 op=LOAD Jul 15 11:52:33.592000 audit[4449]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000410588 items=0 ppid=4438 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139303434353935356337666335373462653963633536313461373566 Jul 15 11:52:33.592000 audit: BPF prog-id=199 op=UNLOAD Jul 15 11:52:33.592000 audit: BPF prog-id=198 op=UNLOAD Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { perfmon } for pid=4449 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit[4449]: AVC avc: denied { bpf } for pid=4449 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:33.592000 audit: BPF prog-id=200 op=LOAD Jul 15 11:52:33.592000 audit[4449]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000410998 items=0 ppid=4438 pid=4449 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:33.592000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6139303434353935356337666335373462653963633536313461373566 Jul 15 11:52:33.594250 systemd-resolved[1202]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:52:33.635650 env[1245]: time="2025-07-15T11:52:33.613667749Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-759464fdbd-8t76s,Uid:1b0b115b-c4c6-4d3f-942e-84cda13fa272,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\"" Jul 15 11:52:33.635650 env[1245]: time="2025-07-15T11:52:33.633032073Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-7c65d6cfc9-8mq62,Uid:3a284661-8d5c-4ec1-96bf-0c0515e97469,Namespace:kube-system,Attempt:1,} returns sandbox id \"a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e\"" Jul 15 11:52:34.188000 env[1245]: time="2025-07-15T11:52:34.187970838Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:34.196250 env[1245]: time="2025-07-15T11:52:34.196232396Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:34.198551 env[1245]: time="2025-07-15T11:52:34.198537964Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:34.200068 env[1245]: time="2025-07-15T11:52:34.200050368Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:34.200432 env[1245]: time="2025-07-15T11:52:34.200414693Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 15 11:52:34.342718 env[1245]: time="2025-07-15T11:52:34.342688486Z" level=info msg="CreateContainer within sandbox \"d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:52:34.343123 env[1245]: time="2025-07-15T11:52:34.343105768Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 15 11:52:34.348940 env[1245]: time="2025-07-15T11:52:34.348881059Z" level=info msg="CreateContainer within sandbox \"5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 15 11:52:34.351847 systemd-networkd[1058]: cali1b20d4e12d4: Gained IPv6LL Jul 15 11:52:34.354026 env[1245]: time="2025-07-15T11:52:34.354003376Z" level=info msg="CreateContainer within sandbox \"a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:52:34.408577 env[1245]: time="2025-07-15T11:52:34.408548438Z" level=info msg="CreateContainer within sandbox \"5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"f8fb2b3f90496de1bda8d513969b4b1a4823ca23f00aeb1648222b72cc3bffd1\"" Jul 15 11:52:34.415715 env[1245]: time="2025-07-15T11:52:34.415693019Z" level=info msg="StartContainer for \"f8fb2b3f90496de1bda8d513969b4b1a4823ca23f00aeb1648222b72cc3bffd1\"" Jul 15 11:52:34.431143 systemd[1]: Started cri-containerd-f8fb2b3f90496de1bda8d513969b4b1a4823ca23f00aeb1648222b72cc3bffd1.scope. Jul 15 11:52:34.459063 kernel: kauditd_printk_skb: 470 callbacks suppressed Jul 15 11:52:34.459160 kernel: audit: type=1400 audit(1752580354.449:1323): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.465613 kernel: audit: type=1400 audit(1752580354.449:1324): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.467119 kernel: audit: type=1400 audit(1752580354.449:1325): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.467147 kernel: audit: type=1400 audit(1752580354.449:1326): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.469824 kernel: audit: type=1400 audit(1752580354.449:1327): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.469851 kernel: audit: type=1400 audit(1752580354.449:1328): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.472529 kernel: audit: type=1400 audit(1752580354.449:1329): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.449000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.476450 kernel: audit: type=1400 audit(1752580354.449:1330): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.449000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.479452 kernel: audit: type=1400 audit(1752580354.449:1331): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.481943 kernel: audit: type=1400 audit(1752580354.456:1332): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.456000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.456000 audit: BPF prog-id=201 op=LOAD Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3747 pid=4493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638666232623366393034393664653162646138643531333936396234 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3747 pid=4493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638666232623366393034393664653162646138643531333936396234 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit: BPF prog-id=202 op=LOAD Jul 15 11:52:34.458000 audit[4493]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000212d10 items=0 ppid=3747 pid=4493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638666232623366393034393664653162646138643531333936396234 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit: BPF prog-id=203 op=LOAD Jul 15 11:52:34.458000 audit[4493]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000212d58 items=0 ppid=3747 pid=4493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638666232623366393034393664653162646138643531333936396234 Jul 15 11:52:34.458000 audit: BPF prog-id=203 op=UNLOAD Jul 15 11:52:34.458000 audit: BPF prog-id=202 op=UNLOAD Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { perfmon } for pid=4493 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit[4493]: AVC avc: denied { bpf } for pid=4493 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.458000 audit: BPF prog-id=204 op=LOAD Jul 15 11:52:34.458000 audit[4493]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000213168 items=0 ppid=3747 pid=4493 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.458000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6638666232623366393034393664653162646138643531333936396234 Jul 15 11:52:34.486453 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2972273918.mount: Deactivated successfully. Jul 15 11:52:34.488455 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1433886843.mount: Deactivated successfully. Jul 15 11:52:34.502848 env[1245]: time="2025-07-15T11:52:34.502822919Z" level=info msg="CreateContainer within sandbox \"a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"c4f8ba1cff2dd58048b26c4ffcd9b2336eb11245366235230d1be31459dd6e41\"" Jul 15 11:52:34.507863 env[1245]: time="2025-07-15T11:52:34.507835129Z" level=info msg="CreateContainer within sandbox \"d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"8dcfa4bbf7281e05a3939b635020feb06ba7ae3d991e73432a6f87cd61e59bb3\"" Jul 15 11:52:34.512244 env[1245]: time="2025-07-15T11:52:34.512224883Z" level=info msg="StartContainer for \"f8fb2b3f90496de1bda8d513969b4b1a4823ca23f00aeb1648222b72cc3bffd1\" returns successfully" Jul 15 11:52:34.532711 env[1245]: time="2025-07-15T11:52:34.532495953Z" level=info msg="StartContainer for \"8dcfa4bbf7281e05a3939b635020feb06ba7ae3d991e73432a6f87cd61e59bb3\"" Jul 15 11:52:34.532874 env[1245]: time="2025-07-15T11:52:34.532860018Z" level=info msg="StartContainer for \"c4f8ba1cff2dd58048b26c4ffcd9b2336eb11245366235230d1be31459dd6e41\"" Jul 15 11:52:34.547322 systemd[1]: Started cri-containerd-8dcfa4bbf7281e05a3939b635020feb06ba7ae3d991e73432a6f87cd61e59bb3.scope. Jul 15 11:52:34.548104 systemd[1]: Started cri-containerd-c4f8ba1cff2dd58048b26c4ffcd9b2336eb11245366235230d1be31459dd6e41.scope. Jul 15 11:52:34.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.605000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.605000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.605000 audit: BPF prog-id=205 op=LOAD Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4438 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334663862613163666632646435383034386232366334666663643962 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4438 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334663862613163666632646435383034386232366334666663643962 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit: BPF prog-id=206 op=LOAD Jul 15 11:52:34.606000 audit[4529]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001deaf0 items=0 ppid=4438 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334663862613163666632646435383034386232366334666663643962 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit: BPF prog-id=207 op=LOAD Jul 15 11:52:34.606000 audit[4529]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001deb38 items=0 ppid=4438 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334663862613163666632646435383034386232366334666663643962 Jul 15 11:52:34.606000 audit: BPF prog-id=207 op=UNLOAD Jul 15 11:52:34.606000 audit: BPF prog-id=206 op=UNLOAD Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { perfmon } for pid=4529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit[4529]: AVC avc: denied { bpf } for pid=4529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.606000 audit: BPF prog-id=208 op=LOAD Jul 15 11:52:34.606000 audit[4529]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001def48 items=0 ppid=4438 pid=4529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.606000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6334663862613163666632646435383034386232366334666663643962 Jul 15 11:52:34.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.609000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.609000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit: BPF prog-id=209 op=LOAD Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4340 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864636661346262663732383165303561333933396236333530323066 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=4340 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864636661346262663732383165303561333933396236333530323066 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit: BPF prog-id=210 op=LOAD Jul 15 11:52:34.610000 audit[4530]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00022fde0 items=0 ppid=4340 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864636661346262663732383165303561333933396236333530323066 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit: BPF prog-id=211 op=LOAD Jul 15 11:52:34.610000 audit[4530]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00022fe28 items=0 ppid=4340 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864636661346262663732383165303561333933396236333530323066 Jul 15 11:52:34.610000 audit: BPF prog-id=211 op=UNLOAD Jul 15 11:52:34.610000 audit: BPF prog-id=210 op=UNLOAD Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { perfmon } for pid=4530 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit[4530]: AVC avc: denied { bpf } for pid=4530 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:34.610000 audit: BPF prog-id=212 op=LOAD Jul 15 11:52:34.610000 audit[4530]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000268238 items=0 ppid=4340 pid=4530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:34.610000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864636661346262663732383165303561333933396236333530323066 Jul 15 11:52:34.608638 systemd-networkd[1058]: cali4b12e30c640: Gained IPv6LL Jul 15 11:52:34.700529 env[1245]: time="2025-07-15T11:52:34.678220637Z" level=info msg="StartContainer for \"8dcfa4bbf7281e05a3939b635020feb06ba7ae3d991e73432a6f87cd61e59bb3\" returns successfully" Jul 15 11:52:34.700529 env[1245]: time="2025-07-15T11:52:34.678216824Z" level=info msg="StartContainer for \"c4f8ba1cff2dd58048b26c4ffcd9b2336eb11245366235230d1be31459dd6e41\" returns successfully" Jul 15 11:52:35.119614 systemd-networkd[1058]: cali764f7c218ea: Gained IPv6LL Jul 15 11:52:35.189000 audit[4558]: AVC avc: denied { getattr } for pid=4558 comm="coredns" path="cgroup:[4026533033]" dev="nsfs" ino=4026533033 scontext=system_u:system_r:svirt_lxc_net_t:s0:c498,c791 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:52:35.189000 audit[4558]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005aa38 a2=c0000c5148 a3=0 items=0 ppid=4340 pid=4558 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c498,c791 key=(null) Jul 15 11:52:35.189000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:52:35.190000 audit[4551]: AVC avc: denied { getattr } for pid=4551 comm="coredns" path="cgroup:[4026533030]" dev="nsfs" ino=4026533030 scontext=system_u:system_r:svirt_lxc_net_t:s0:c586,c987 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:52:35.190000 audit[4551]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00014cb10 a2=c000499898 a3=0 items=0 ppid=4438 pid=4551 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c586,c987 key=(null) Jul 15 11:52:35.190000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:52:35.439938 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount506510875.mount: Deactivated successfully. Jul 15 11:52:35.440828 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3726325409.mount: Deactivated successfully. Jul 15 11:52:36.652745 kubelet[2102]: I0715 11:52:36.614163 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-8mq62" podStartSLOduration=43.462144796 podStartE2EDuration="43.462144796s" podCreationTimestamp="2025-07-15 11:51:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:52:36.398527267 +0000 UTC m=+45.731773280" watchObservedRunningTime="2025-07-15 11:52:36.462144796 +0000 UTC m=+45.795390802" Jul 15 11:52:36.673486 kubelet[2102]: I0715 11:52:36.661180 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-58fd7646b9-v6rqg" podStartSLOduration=29.3650853 podStartE2EDuration="34.661167878s" podCreationTimestamp="2025-07-15 11:52:02 +0000 UTC" firstStartedPulling="2025-07-15 11:52:29.028107889 +0000 UTC m=+38.361353890" lastFinishedPulling="2025-07-15 11:52:34.324190464 +0000 UTC m=+43.657436468" observedRunningTime="2025-07-15 11:52:36.652662935 +0000 UTC m=+45.985908939" watchObservedRunningTime="2025-07-15 11:52:36.661167878 +0000 UTC m=+45.994413884" Jul 15 11:52:37.185156 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4053654425.mount: Deactivated successfully. Jul 15 11:52:37.315261 env[1245]: time="2025-07-15T11:52:37.315129708Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:37.326120 env[1245]: time="2025-07-15T11:52:37.325109540Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:37.328049 env[1245]: time="2025-07-15T11:52:37.328032733Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:37.330156 env[1245]: time="2025-07-15T11:52:37.330137649Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:37.330449 env[1245]: time="2025-07-15T11:52:37.330422491Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 15 11:52:37.533000 audit[4604]: NETFILTER_CFG table=filter:112 family=2 entries=17 op=nft_register_rule pid=4604 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:37.533000 audit[4604]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe6b42aaf0 a2=0 a3=7ffe6b42aadc items=0 ppid=2205 pid=4604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:37.533000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:37.601000 audit[4604]: NETFILTER_CFG table=nat:113 family=2 entries=47 op=nft_register_chain pid=4604 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:37.601000 audit[4604]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffe6b42aaf0 a2=0 a3=7ffe6b42aadc items=0 ppid=2205 pid=4604 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:37.601000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:37.708000 audit[4610]: NETFILTER_CFG table=filter:114 family=2 entries=14 op=nft_register_rule pid=4610 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:37.708000 audit[4610]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe0177ba00 a2=0 a3=7ffe0177b9ec items=0 ppid=2205 pid=4610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:37.708000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:37.710000 audit[4610]: NETFILTER_CFG table=nat:115 family=2 entries=20 op=nft_register_rule pid=4610 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:37.710000 audit[4610]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffe0177ba00 a2=0 a3=7ffe0177b9ec items=0 ppid=2205 pid=4610 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:37.710000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:37.732663 systemd[1]: run-containerd-runc-k8s.io-f8fb2b3f90496de1bda8d513969b4b1a4823ca23f00aeb1648222b72cc3bffd1-runc.P9h6kG.mount: Deactivated successfully. Jul 15 11:52:37.866307 env[1245]: time="2025-07-15T11:52:37.866178197Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:52:38.032854 env[1245]: time="2025-07-15T11:52:38.031499502Z" level=info msg="CreateContainer within sandbox \"c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 15 11:52:38.047987 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3028427066.mount: Deactivated successfully. Jul 15 11:52:38.053950 env[1245]: time="2025-07-15T11:52:38.053921700Z" level=info msg="CreateContainer within sandbox \"c8b2c571896b6b039900842c31ed634da1d36b69d334ccebb86373d85297f022\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"5db13709de3081aaea36876237084d99726a023d4e0539f6e7e654dd6f6655ae\"" Jul 15 11:52:38.105763 env[1245]: time="2025-07-15T11:52:38.105728557Z" level=info msg="StartContainer for \"5db13709de3081aaea36876237084d99726a023d4e0539f6e7e654dd6f6655ae\"" Jul 15 11:52:38.132883 systemd[1]: Started cri-containerd-5db13709de3081aaea36876237084d99726a023d4e0539f6e7e654dd6f6655ae.scope. Jul 15 11:52:38.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit: BPF prog-id=213 op=LOAD Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3643 pid=4642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:38.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623133373039646533303831616165613336383736323337303834 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3643 pid=4642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:38.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623133373039646533303831616165613336383736323337303834 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit: BPF prog-id=214 op=LOAD Jul 15 11:52:38.144000 audit[4642]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003d8db0 items=0 ppid=3643 pid=4642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:38.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623133373039646533303831616165613336383736323337303834 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit: BPF prog-id=215 op=LOAD Jul 15 11:52:38.144000 audit[4642]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003d8df8 items=0 ppid=3643 pid=4642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:38.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623133373039646533303831616165613336383736323337303834 Jul 15 11:52:38.144000 audit: BPF prog-id=215 op=UNLOAD Jul 15 11:52:38.144000 audit: BPF prog-id=214 op=UNLOAD Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { perfmon } for pid=4642 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit[4642]: AVC avc: denied { bpf } for pid=4642 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:38.144000 audit: BPF prog-id=216 op=LOAD Jul 15 11:52:38.144000 audit[4642]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003d9208 items=0 ppid=3643 pid=4642 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:38.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3564623133373039646533303831616165613336383736323337303834 Jul 15 11:52:38.321573 env[1245]: time="2025-07-15T11:52:38.321538357Z" level=info msg="StartContainer for \"5db13709de3081aaea36876237084d99726a023d4e0539f6e7e654dd6f6655ae\" returns successfully" Jul 15 11:52:38.906112 systemd[1]: run-containerd-runc-k8s.io-f8fb2b3f90496de1bda8d513969b4b1a4823ca23f00aeb1648222b72cc3bffd1-runc.OP4a1N.mount: Deactivated successfully. Jul 15 11:52:39.262690 kubelet[2102]: I0715 11:52:39.262636 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-7c65d6cfc9-jcf2z" podStartSLOduration=46.262609215 podStartE2EDuration="46.262609215s" podCreationTimestamp="2025-07-15 11:51:53 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:52:36.726939764 +0000 UTC m=+46.060185777" watchObservedRunningTime="2025-07-15 11:52:39.262609215 +0000 UTC m=+48.595855223" Jul 15 11:52:39.267905 kubelet[2102]: I0715 11:52:39.263169 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-df96468c7-htxlk" podStartSLOduration=3.079540013 podStartE2EDuration="13.263160258s" podCreationTimestamp="2025-07-15 11:52:26 +0000 UTC" firstStartedPulling="2025-07-15 11:52:27.635530424 +0000 UTC m=+36.968776428" lastFinishedPulling="2025-07-15 11:52:37.819150668 +0000 UTC m=+47.152396673" observedRunningTime="2025-07-15 11:52:39.24152172 +0000 UTC m=+48.574767728" watchObservedRunningTime="2025-07-15 11:52:39.263160258 +0000 UTC m=+48.596406258" Jul 15 11:52:39.275000 audit[4695]: NETFILTER_CFG table=filter:116 family=2 entries=13 op=nft_register_rule pid=4695 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:39.275000 audit[4695]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffcc3c4a280 a2=0 a3=7ffcc3c4a26c items=0 ppid=2205 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:39.275000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:39.279000 audit[4695]: NETFILTER_CFG table=nat:117 family=2 entries=27 op=nft_register_chain pid=4695 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:39.279000 audit[4695]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffcc3c4a280 a2=0 a3=7ffcc3c4a26c items=0 ppid=2205 pid=4695 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:39.279000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:41.065148 systemd[1]: run-containerd-runc-k8s.io-0f8cf81b4443ff4e4b04da06fa8fb312ef9aaff5de4b55768e573e1d3b6c789c-runc.BOZHoZ.mount: Deactivated successfully. Jul 15 11:52:41.422721 env[1245]: time="2025-07-15T11:52:41.422643548Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:41.431597 env[1245]: time="2025-07-15T11:52:41.431556391Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:41.434095 env[1245]: time="2025-07-15T11:52:41.434062335Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:41.436329 env[1245]: time="2025-07-15T11:52:41.436295857Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:41.438276 env[1245]: time="2025-07-15T11:52:41.436522594Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:52:41.447134 env[1245]: time="2025-07-15T11:52:41.447078364Z" level=info msg="CreateContainer within sandbox \"50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:52:41.448009 env[1245]: time="2025-07-15T11:52:41.447216995Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 15 11:52:41.470092 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount823505497.mount: Deactivated successfully. Jul 15 11:52:41.483351 env[1245]: time="2025-07-15T11:52:41.483313398Z" level=info msg="CreateContainer within sandbox \"50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\"" Jul 15 11:52:41.483845 env[1245]: time="2025-07-15T11:52:41.483826150Z" level=info msg="StartContainer for \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\"" Jul 15 11:52:41.504026 systemd[1]: Started cri-containerd-0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a.scope. Jul 15 11:52:41.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.585792 kernel: kauditd_printk_skb: 242 callbacks suppressed Jul 15 11:52:41.637073 kernel: audit: type=1400 audit(1752580361.568:1403): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.666838 kernel: audit: type=1400 audit(1752580361.568:1404): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.666911 kernel: audit: type=1400 audit(1752580361.569:1405): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.666930 kernel: audit: type=1400 audit(1752580361.569:1406): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.666949 kernel: audit: type=1400 audit(1752580361.569:1407): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.672535 kernel: audit: type=1400 audit(1752580361.569:1408): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.672603 kernel: audit: type=1400 audit(1752580361.569:1409): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.672626 kernel: audit: type=1400 audit(1752580361.569:1410): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.672644 kernel: audit: type=1400 audit(1752580361.569:1411): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.672661 kernel: audit: type=1400 audit(1752580361.569:1412): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.568000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit: BPF prog-id=217 op=LOAD Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[4720]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=3956 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:41.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353865303736306163373765396162626435306631626266323862 Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[4720]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=3956 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:41.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353865303736306163373765396162626435306631626266323862 Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.569000 audit: BPF prog-id=218 op=LOAD Jul 15 11:52:41.569000 audit[4720]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00038bdc0 items=0 ppid=3956 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:41.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353865303736306163373765396162626435306631626266323862 Jul 15 11:52:41.573000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.573000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.573000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.573000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.573000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.573000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.573000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.573000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.573000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.573000 audit: BPF prog-id=219 op=LOAD Jul 15 11:52:41.573000 audit[4720]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00038be08 items=0 ppid=3956 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:41.573000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353865303736306163373765396162626435306631626266323862 Jul 15 11:52:41.576000 audit: BPF prog-id=219 op=UNLOAD Jul 15 11:52:41.576000 audit: BPF prog-id=218 op=UNLOAD Jul 15 11:52:41.576000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.576000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.576000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.576000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.576000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.576000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.576000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.576000 audit[4720]: AVC avc: denied { perfmon } for pid=4720 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.576000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.576000 audit[4720]: AVC avc: denied { bpf } for pid=4720 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:41.576000 audit: BPF prog-id=220 op=LOAD Jul 15 11:52:41.576000 audit[4720]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003e8218 items=0 ppid=3956 pid=4720 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:41.576000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3066353865303736306163373765396162626435306631626266323862 Jul 15 11:52:41.769216 env[1245]: time="2025-07-15T11:52:41.667020849Z" level=info msg="StartContainer for \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\" returns successfully" Jul 15 11:52:42.573000 audit[4759]: NETFILTER_CFG table=filter:118 family=2 entries=12 op=nft_register_rule pid=4759 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:42.573000 audit[4759]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7ffdbff69850 a2=0 a3=7ffdbff6983c items=0 ppid=2205 pid=4759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:42.573000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:42.579000 audit[4759]: NETFILTER_CFG table=nat:119 family=2 entries=22 op=nft_register_rule pid=4759 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:42.579000 audit[4759]: SYSCALL arch=c000003e syscall=46 success=yes exit=6540 a0=3 a1=7ffdbff69850 a2=0 a3=7ffdbff6983c items=0 ppid=2205 pid=4759 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:42.579000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:42.843000 audit[4731]: AVC avc: denied { watch } for pid=4731 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1972882796/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c898 tclass=file permissive=0 Jul 15 11:52:42.843000 audit[4731]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000acc1e0 a2=fc6 a3=0 items=0 ppid=3956 pid=4731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 key=(null) Jul 15 11:52:42.843000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:52:42.930146 kubelet[2102]: I0715 11:52:42.914915 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-759464fdbd-cvd46" podStartSLOduration=30.571789065 podStartE2EDuration="41.907070057s" podCreationTimestamp="2025-07-15 11:52:01 +0000 UTC" firstStartedPulling="2025-07-15 11:52:30.102216657 +0000 UTC m=+39.435462658" lastFinishedPulling="2025-07-15 11:52:41.437497645 +0000 UTC m=+50.770743650" observedRunningTime="2025-07-15 11:52:42.513218027 +0000 UTC m=+51.846464039" watchObservedRunningTime="2025-07-15 11:52:42.907070057 +0000 UTC m=+52.240316058" Jul 15 11:52:42.975000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:42.975000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002b74bd0 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:52:42.975000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:52:42.975000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:42.975000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002f1a260 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:52:42.975000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:52:43.021000 audit[4761]: NETFILTER_CFG table=filter:120 family=2 entries=11 op=nft_register_rule pid=4761 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:43.021000 audit[4761]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc4c4eeb70 a2=0 a3=7ffc4c4eeb5c items=0 ppid=2205 pid=4761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:43.021000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:43.032000 audit[4761]: NETFILTER_CFG table=nat:121 family=2 entries=29 op=nft_register_chain pid=4761 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:43.032000 audit[4761]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffc4c4eeb70 a2=0 a3=7ffc4c4eeb5c items=0 ppid=2205 pid=4761 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:43.032000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:43.118501 env[1245]: time="2025-07-15T11:52:43.118128345Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:43.119522 env[1245]: time="2025-07-15T11:52:43.119504917Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:43.120164 env[1245]: time="2025-07-15T11:52:43.120150986Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:43.121224 env[1245]: time="2025-07-15T11:52:43.121207162Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:43.121508 env[1245]: time="2025-07-15T11:52:43.121491911Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 15 11:52:43.136618 env[1245]: time="2025-07-15T11:52:43.136594371Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:52:43.144546 env[1245]: time="2025-07-15T11:52:43.144513996Z" level=info msg="CreateContainer within sandbox \"e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 15 11:52:43.160782 env[1245]: time="2025-07-15T11:52:43.160750578Z" level=info msg="CreateContainer within sandbox \"e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"a55ad52f855e1f63f44eb6742aac8d3126b4b96128e70669c382b2652007f19b\"" Jul 15 11:52:43.164165 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4086409282.mount: Deactivated successfully. Jul 15 11:52:43.169455 env[1245]: time="2025-07-15T11:52:43.166807476Z" level=info msg="StartContainer for \"a55ad52f855e1f63f44eb6742aac8d3126b4b96128e70669c382b2652007f19b\"" Jul 15 11:52:43.197892 systemd[1]: Started cri-containerd-a55ad52f855e1f63f44eb6742aac8d3126b4b96128e70669c382b2652007f19b.scope. Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f9c3dcf70f8 items=0 ppid=4009 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:43.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135356164353266383535653166363366343465623637343261616338 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit: BPF prog-id=221 op=LOAD Jul 15 11:52:43.215000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003a5058 items=0 ppid=4009 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:43.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135356164353266383535653166363366343465623637343261616338 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit: BPF prog-id=222 op=LOAD Jul 15 11:52:43.215000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003a50a8 items=0 ppid=4009 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:43.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135356164353266383535653166363366343465623637343261616338 Jul 15 11:52:43.215000 audit: BPF prog-id=222 op=UNLOAD Jul 15 11:52:43.215000 audit: BPF prog-id=221 op=UNLOAD Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { perfmon } for pid=4769 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit[4769]: AVC avc: denied { bpf } for pid=4769 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.215000 audit: BPF prog-id=223 op=LOAD Jul 15 11:52:43.215000 audit[4769]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003a5138 items=0 ppid=4009 pid=4769 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:43.215000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6135356164353266383535653166363366343465623637343261616338 Jul 15 11:52:43.313933 env[1245]: time="2025-07-15T11:52:43.264950538Z" level=info msg="StartContainer for \"a55ad52f855e1f63f44eb6742aac8d3126b4b96128e70669c382b2652007f19b\" returns successfully" Jul 15 11:52:43.500845 env[1245]: time="2025-07-15T11:52:43.500763518Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:43.501632 env[1245]: time="2025-07-15T11:52:43.501617089Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:43.502275 env[1245]: time="2025-07-15T11:52:43.502261984Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:43.503500 env[1245]: time="2025-07-15T11:52:43.503480851Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:52:43.504106 env[1245]: time="2025-07-15T11:52:43.504088710Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:43.507755 env[1245]: time="2025-07-15T11:52:43.507728710Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 15 11:52:43.508480 env[1245]: time="2025-07-15T11:52:43.508463500Z" level=info msg="CreateContainer within sandbox \"aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:52:43.535094 env[1245]: time="2025-07-15T11:52:43.535070750Z" level=info msg="CreateContainer within sandbox \"aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"1ad17651182fcd578ec0176b4c3a027f86d187feaef8eb2f134908f48009e8f0\"" Jul 15 11:52:43.535586 env[1245]: time="2025-07-15T11:52:43.535573158Z" level=info msg="StartContainer for \"1ad17651182fcd578ec0176b4c3a027f86d187feaef8eb2f134908f48009e8f0\"" Jul 15 11:52:43.547316 systemd[1]: Started cri-containerd-1ad17651182fcd578ec0176b4c3a027f86d187feaef8eb2f134908f48009e8f0.scope. Jul 15 11:52:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit: BPF prog-id=224 op=LOAD Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4058 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:43.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161643137363531313832666364353738656330313736623463336130 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4058 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:43.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161643137363531313832666364353738656330313736623463336130 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit: BPF prog-id=225 op=LOAD Jul 15 11:52:43.559000 audit[4805]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003ceb80 items=0 ppid=4058 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:43.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161643137363531313832666364353738656330313736623463336130 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.559000 audit: BPF prog-id=226 op=LOAD Jul 15 11:52:43.559000 audit[4805]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003cebc8 items=0 ppid=4058 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:43.559000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161643137363531313832666364353738656330313736623463336130 Jul 15 11:52:43.560000 audit: BPF prog-id=226 op=UNLOAD Jul 15 11:52:43.560000 audit: BPF prog-id=225 op=UNLOAD Jul 15 11:52:43.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.560000 audit[4805]: AVC avc: denied { perfmon } for pid=4805 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.560000 audit[4805]: AVC avc: denied { bpf } for pid=4805 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:43.560000 audit: BPF prog-id=227 op=LOAD Jul 15 11:52:43.560000 audit[4805]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003cefd8 items=0 ppid=4058 pid=4805 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:43.560000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161643137363531313832666364353738656330313736623463336130 Jul 15 11:52:43.588336 env[1245]: time="2025-07-15T11:52:43.588309095Z" level=info msg="StartContainer for \"1ad17651182fcd578ec0176b4c3a027f86d187feaef8eb2f134908f48009e8f0\" returns successfully" Jul 15 11:52:44.159652 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3392987661.mount: Deactivated successfully. Jul 15 11:52:44.893570 kubelet[2102]: I0715 11:52:44.893510 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-cd64889bb-t28g6" podStartSLOduration=30.688492377 podStartE2EDuration="43.890956928s" podCreationTimestamp="2025-07-15 11:52:01 +0000 UTC" firstStartedPulling="2025-07-15 11:52:30.301857283 +0000 UTC m=+39.635103284" lastFinishedPulling="2025-07-15 11:52:43.504321835 +0000 UTC m=+52.837567835" observedRunningTime="2025-07-15 11:52:44.866662045 +0000 UTC m=+54.199908053" watchObservedRunningTime="2025-07-15 11:52:44.890956928 +0000 UTC m=+54.224202935" Jul 15 11:52:45.010000 audit[4839]: NETFILTER_CFG table=filter:122 family=2 entries=10 op=nft_register_rule pid=4839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:45.010000 audit[4839]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fffb6d02130 a2=0 a3=7fffb6d0211c items=0 ppid=2205 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:45.010000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:45.017000 audit[4839]: NETFILTER_CFG table=nat:123 family=2 entries=32 op=nft_register_rule pid=4839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:45.017000 audit[4839]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7fffb6d02130 a2=0 a3=7fffb6d0211c items=0 ppid=2205 pid=4839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:45.017000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:45.078000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:45.078000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c0048d0720 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:52:45.078000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:52:45.079000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:45.079000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c0061e07c0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:52:45.079000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:52:45.079000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:45.079000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c007b629f0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:52:45.079000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:52:45.096000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:45.096000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c0048d1ec0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:52:45.096000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:52:45.106000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:45.106000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7b a1=c0062f29e0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:52:45.106000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:52:45.106000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:45.106000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c007b62bd0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:52:45.106000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:52:45.118000 audit[4816]: AVC avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1645455470/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c446 tclass=file permissive=0 Jul 15 11:52:45.118000 audit[4816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002750c00 a2=fc6 a3=0 items=0 ppid=4058 pid=4816 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 key=(null) Jul 15 11:52:45.118000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:52:45.701000 audit[4841]: NETFILTER_CFG table=filter:124 family=2 entries=10 op=nft_register_rule pid=4841 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:45.701000 audit[4841]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff2140db10 a2=0 a3=7fff2140dafc items=0 ppid=2205 pid=4841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:45.701000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:45.704000 audit[4841]: NETFILTER_CFG table=nat:125 family=2 entries=36 op=nft_register_chain pid=4841 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:52:45.704000 audit[4841]: SYSCALL arch=c000003e syscall=46 success=yes exit=12004 a0=3 a1=7fff2140db10 a2=0 a3=7fff2140dafc items=0 ppid=2205 pid=4841 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:45.704000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:52:46.320994 systemd[1]: Created slice kubepods-besteffort-pode8c1fd2c_7a50_4cea_a021_3e08b3dc0316.slice. Jul 15 11:52:46.454993 kubelet[2102]: I0715 11:52:46.454962 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/e8c1fd2c-7a50-4cea-a021-3e08b3dc0316-calico-apiserver-certs\") pod \"calico-apiserver-cd64889bb-ph9z4\" (UID: \"e8c1fd2c-7a50-4cea-a021-3e08b3dc0316\") " pod="calico-apiserver/calico-apiserver-cd64889bb-ph9z4" Jul 15 11:52:46.459191 kubelet[2102]: I0715 11:52:46.455332 2102 reconciler_common.go:245] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-vgs2h\" (UniqueName: \"kubernetes.io/projected/e8c1fd2c-7a50-4cea-a021-3e08b3dc0316-kube-api-access-vgs2h\") pod \"calico-apiserver-cd64889bb-ph9z4\" (UID: \"e8c1fd2c-7a50-4cea-a021-3e08b3dc0316\") " pod="calico-apiserver/calico-apiserver-cd64889bb-ph9z4" Jul 15 11:52:47.069206 env[1245]: time="2025-07-15T11:52:47.069121124Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cd64889bb-ph9z4,Uid:e8c1fd2c-7a50-4cea-a021-3e08b3dc0316,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:52:47.764679 kernel: kauditd_printk_skb: 201 callbacks suppressed Jul 15 11:52:47.808333 kernel: audit: type=1400 audit(1752580367.762:1463): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:47.815867 kernel: audit: type=1400 audit(1752580367.763:1464): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:47.815926 kernel: audit: type=1300 audit(1752580367.763:1464): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002f1b700 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:52:47.820103 kernel: audit: type=1327 audit(1752580367.763:1464): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:52:47.820138 kernel: audit: type=1300 audit(1752580367.762:1463): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002f1b6e0 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:52:47.821337 kernel: audit: type=1327 audit(1752580367.762:1463): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:52:47.822356 kernel: audit: type=1400 audit(1752580367.776:1465): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:47.823865 kernel: audit: type=1300 audit(1752580367.776:1465): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00224e200 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:52:47.826494 kernel: audit: type=1327 audit(1752580367.776:1465): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:52:47.762000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:47.987270 kernel: audit: type=1400 audit(1752580367.852:1466): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:47.763000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:47.763000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002f1b700 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:52:47.763000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:52:47.762000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002f1b6e0 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:52:47.762000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:52:47.776000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:47.776000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00224e200 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:52:47.776000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:52:47.852000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:52:47.852000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00224e2e0 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:52:47.852000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:52:48.447777 env[1245]: time="2025-07-15T11:52:48.447354193Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:48.530738 env[1245]: time="2025-07-15T11:52:48.458467908Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:48.530738 env[1245]: time="2025-07-15T11:52:48.476767957Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:48.530738 env[1245]: time="2025-07-15T11:52:48.477067742Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:48.530738 env[1245]: time="2025-07-15T11:52:48.477909196Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 15 11:52:49.110645 env[1245]: time="2025-07-15T11:52:49.110577986Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:52:49.816369 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:52:49.880034 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid6db8bcdb4f: link becomes ready Jul 15 11:52:49.818209 systemd-networkd[1058]: calid6db8bcdb4f: Link UP Jul 15 11:52:49.818316 systemd-networkd[1058]: calid6db8bcdb4f: Gained carrier Jul 15 11:52:49.978277 env[1245]: time="2025-07-15T11:52:49.911480641Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:49.978277 env[1245]: time="2025-07-15T11:52:49.915701277Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:49.978277 env[1245]: time="2025-07-15T11:52:49.918777561Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:49.978277 env[1245]: time="2025-07-15T11:52:49.925084570Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:49.978277 env[1245]: time="2025-07-15T11:52:49.925387870Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:48.822 [INFO][4844] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0 calico-apiserver-cd64889bb- calico-apiserver e8c1fd2c-7a50-4cea-a021-3e08b3dc0316 1080 0 2025-07-15 11:52:45 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:cd64889bb projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-cd64889bb-ph9z4 eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calid6db8bcdb4f [] [] }} ContainerID="57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-ph9z4" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--ph9z4-" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:48.835 [INFO][4844] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-ph9z4" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.427 [INFO][4864] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" HandleID="k8s-pod-network.57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" Workload="localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.439 [INFO][4864] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" HandleID="k8s-pod-network.57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" Workload="localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000330300), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-cd64889bb-ph9z4", "timestamp":"2025-07-15 11:52:49.427861596 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.439 [INFO][4864] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.442 [INFO][4864] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.442 [INFO][4864] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.562 [INFO][4864] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" host="localhost" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.609 [INFO][4864] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.615 [INFO][4864] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.616 [INFO][4864] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.619 [INFO][4864] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.620 [INFO][4864] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" host="localhost" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.620 [INFO][4864] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.631 [INFO][4864] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" host="localhost" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.640 [INFO][4864] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.138/26] block=192.168.88.128/26 handle="k8s-pod-network.57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" host="localhost" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.640 [INFO][4864] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.138/26] handle="k8s-pod-network.57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" host="localhost" Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.640 [INFO][4864] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:50.287543 env[1245]: 2025-07-15 11:52:49.640 [INFO][4864] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.138/26] IPv6=[] ContainerID="57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" HandleID="k8s-pod-network.57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" Workload="localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0" Jul 15 11:52:50.311551 env[1245]: 2025-07-15 11:52:49.690 [INFO][4844] cni-plugin/k8s.go 418: Populated endpoint ContainerID="57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-ph9z4" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0", GenerateName:"calico-apiserver-cd64889bb-", Namespace:"calico-apiserver", SelfLink:"", UID:"e8c1fd2c-7a50-4cea-a021-3e08b3dc0316", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cd64889bb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-cd64889bb-ph9z4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid6db8bcdb4f", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:50.311551 env[1245]: 2025-07-15 11:52:49.729 [INFO][4844] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.138/32] ContainerID="57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-ph9z4" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0" Jul 15 11:52:50.311551 env[1245]: 2025-07-15 11:52:49.734 [INFO][4844] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid6db8bcdb4f ContainerID="57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-ph9z4" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0" Jul 15 11:52:50.311551 env[1245]: 2025-07-15 11:52:49.837 [INFO][4844] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-ph9z4" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0" Jul 15 11:52:50.311551 env[1245]: 2025-07-15 11:52:49.885 [INFO][4844] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-ph9z4" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0", GenerateName:"calico-apiserver-cd64889bb-", Namespace:"calico-apiserver", SelfLink:"", UID:"e8c1fd2c-7a50-4cea-a021-3e08b3dc0316", ResourceVersion:"1080", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 45, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cd64889bb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe", Pod:"calico-apiserver-cd64889bb-ph9z4", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid6db8bcdb4f", MAC:"76:fb:f0:e3:9f:67", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:50.311551 env[1245]: 2025-07-15 11:52:50.285 [INFO][4844] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe" Namespace="calico-apiserver" Pod="calico-apiserver-cd64889bb-ph9z4" WorkloadEndpoint="localhost-k8s-calico--apiserver--cd64889bb--ph9z4-eth0" Jul 15 11:52:50.424912 env[1245]: time="2025-07-15T11:52:50.424861576Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:52:50.425108 env[1245]: time="2025-07-15T11:52:50.425094049Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:52:50.425180 env[1245]: time="2025-07-15T11:52:50.425167598Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:52:50.425351 env[1245]: time="2025-07-15T11:52:50.425335102Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe pid=4888 runtime=io.containerd.runc.v2 Jul 15 11:52:50.467852 systemd[1]: run-containerd-runc-k8s.io-57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe-runc.z4YM99.mount: Deactivated successfully. Jul 15 11:52:50.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.521000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.521000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.521000 audit: BPF prog-id=228 op=LOAD Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4888 pid=4898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:50.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623831386533626665616564343130336465656131633237323332 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=c items=0 ppid=4888 pid=4898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:50.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623831386533626665616564343130336465656131633237323332 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit: BPF prog-id=229 op=LOAD Jul 15 11:52:50.522000 audit[4898]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c000025260 items=0 ppid=4888 pid=4898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:50.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623831386533626665616564343130336465656131633237323332 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit: BPF prog-id=230 op=LOAD Jul 15 11:52:50.522000 audit[4898]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0000252a8 items=0 ppid=4888 pid=4898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:50.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623831386533626665616564343130336465656131633237323332 Jul 15 11:52:50.522000 audit: BPF prog-id=230 op=UNLOAD Jul 15 11:52:50.522000 audit: BPF prog-id=229 op=UNLOAD Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { perfmon } for pid=4898 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit[4898]: AVC avc: denied { bpf } for pid=4898 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:50.522000 audit: BPF prog-id=231 op=LOAD Jul 15 11:52:50.522000 audit[4898]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0000256b8 items=0 ppid=4888 pid=4898 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:50.522000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3537623831386533626665616564343130336465656131633237323332 Jul 15 11:52:50.679306 env[1245]: time="2025-07-15T11:52:50.547799397Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-cd64889bb-ph9z4,Uid:e8c1fd2c-7a50-4cea-a021-3e08b3dc0316,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe\"" Jul 15 11:52:50.495078 systemd[1]: Started cri-containerd-57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe.scope. Jul 15 11:52:50.561832 systemd-resolved[1202]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:52:50.849000 audit[4923]: NETFILTER_CFG table=filter:126 family=2 entries=61 op=nft_register_chain pid=4923 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:52:50.849000 audit[4923]: SYSCALL arch=c000003e syscall=46 success=yes exit=29000 a0=3 a1=7ffe1f190120 a2=0 a3=7ffe1f19010c items=0 ppid=3428 pid=4923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:50.849000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:52:51.321062 systemd-networkd[1058]: calid6db8bcdb4f: Gained IPv6LL Jul 15 11:52:51.956870 env[1245]: time="2025-07-15T11:52:51.956814083Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 15 11:52:51.991455 env[1245]: time="2025-07-15T11:52:51.991379130Z" level=info msg="CreateContainer within sandbox \"2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 15 11:52:52.020279 env[1245]: time="2025-07-15T11:52:52.020247302Z" level=info msg="CreateContainer within sandbox \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:52:52.023873 env[1245]: time="2025-07-15T11:52:52.023842842Z" level=info msg="CreateContainer within sandbox \"57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:52:52.071920 env[1245]: time="2025-07-15T11:52:52.071892191Z" level=info msg="StopPodSandbox for \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\"" Jul 15 11:52:52.144315 env[1245]: time="2025-07-15T11:52:52.144290575Z" level=info msg="CreateContainer within sandbox \"57b818e3bfeaed4103deea1c2723202d042e3b3c63e73ef5cedff691e084f2fe\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"1abd541d3029e12d3d409b349825f4e1e8586848deb70cae9bf807348b7847ff\"" Jul 15 11:52:52.148334 env[1245]: time="2025-07-15T11:52:52.148316845Z" level=info msg="StartContainer for \"1abd541d3029e12d3d409b349825f4e1e8586848deb70cae9bf807348b7847ff\"" Jul 15 11:52:52.149390 env[1245]: time="2025-07-15T11:52:52.149375131Z" level=info msg="CreateContainer within sandbox \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\"" Jul 15 11:52:52.151400 env[1245]: time="2025-07-15T11:52:52.151378820Z" level=info msg="StartContainer for \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\"" Jul 15 11:52:52.182198 env[1245]: time="2025-07-15T11:52:52.182168225Z" level=info msg="CreateContainer within sandbox \"2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"9a2e30c26537cb22929ed2a1706326694ea416cd4dcebafc3274ae8ebb19c692\"" Jul 15 11:52:52.184488 env[1245]: time="2025-07-15T11:52:52.182884638Z" level=info msg="StartContainer for \"9a2e30c26537cb22929ed2a1706326694ea416cd4dcebafc3274ae8ebb19c692\"" Jul 15 11:52:52.238136 systemd[1]: Started cri-containerd-0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668.scope. Jul 15 11:52:52.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit: BPF prog-id=232 op=LOAD Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[4969]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4153 pid=4969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961326533306332363533376362323239323965643261313730363332 Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[4969]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4153 pid=4969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961326533306332363533376362323239323965643261313730363332 Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.260000 audit: BPF prog-id=233 op=LOAD Jul 15 11:52:52.260000 audit[4969]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c000292c90 items=0 ppid=4153 pid=4969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.260000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961326533306332363533376362323239323965643261313730363332 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit: BPF prog-id=234 op=LOAD Jul 15 11:52:52.261000 audit[4969]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000292cd8 items=0 ppid=4153 pid=4969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961326533306332363533376362323239323965643261313730363332 Jul 15 11:52:52.261000 audit: BPF prog-id=234 op=UNLOAD Jul 15 11:52:52.261000 audit: BPF prog-id=233 op=UNLOAD Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { perfmon } for pid=4969 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[4969]: AVC avc: denied { bpf } for pid=4969 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit: BPF prog-id=235 op=LOAD Jul 15 11:52:52.261000 audit[4969]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0002930e8 items=0 ppid=4153 pid=4969 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.261000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3961326533306332363533376362323239323965643261313730363332 Jul 15 11:52:52.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.261000 audit: BPF prog-id=236 op=LOAD Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4888 pid=4948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161626435343164333032396531326433643430396233343938323566 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=4888 pid=4948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161626435343164333032396531326433643430396233343938323566 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit: BPF prog-id=237 op=LOAD Jul 15 11:52:52.264000 audit[4948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00038ede0 items=0 ppid=4888 pid=4948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161626435343164333032396531326433643430396233343938323566 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit: BPF prog-id=238 op=LOAD Jul 15 11:52:52.264000 audit[4948]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00038ee28 items=0 ppid=4888 pid=4948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161626435343164333032396531326433643430396233343938323566 Jul 15 11:52:52.264000 audit: BPF prog-id=238 op=UNLOAD Jul 15 11:52:52.264000 audit: BPF prog-id=237 op=UNLOAD Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { perfmon } for pid=4948 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit[4948]: AVC avc: denied { bpf } for pid=4948 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.264000 audit: BPF prog-id=239 op=LOAD Jul 15 11:52:52.264000 audit[4948]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00038f238 items=0 ppid=4888 pid=4948 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.264000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3161626435343164333032396531326433643430396233343938323566 Jul 15 11:52:52.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit: BPF prog-id=240 op=LOAD Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4408 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063636336376337396530353161663666393034343836636439616163 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4408 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063636336376337396530353161663666393034343836636439616163 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit: BPF prog-id=241 op=LOAD Jul 15 11:52:52.295000 audit[4953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003ad0b0 items=0 ppid=4408 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063636336376337396530353161663666393034343836636439616163 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit: BPF prog-id=242 op=LOAD Jul 15 11:52:52.295000 audit[4953]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003ad0f8 items=0 ppid=4408 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063636336376337396530353161663666393034343836636439616163 Jul 15 11:52:52.295000 audit: BPF prog-id=242 op=UNLOAD Jul 15 11:52:52.295000 audit: BPF prog-id=241 op=UNLOAD Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { perfmon } for pid=4953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit[4953]: AVC avc: denied { bpf } for pid=4953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:52:52.295000 audit: BPF prog-id=243 op=LOAD Jul 15 11:52:52.295000 audit[4953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003ad508 items=0 ppid=4408 pid=4953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:52:52.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063636336376337396530353161663666393034343836636439616163 Jul 15 11:52:52.238976 systemd[1]: Started cri-containerd-1abd541d3029e12d3d409b349825f4e1e8586848deb70cae9bf807348b7847ff.scope. Jul 15 11:52:52.324708 env[1245]: time="2025-07-15T11:52:52.309298308Z" level=info msg="StartContainer for \"9a2e30c26537cb22929ed2a1706326694ea416cd4dcebafc3274ae8ebb19c692\" returns successfully" Jul 15 11:52:52.324708 env[1245]: time="2025-07-15T11:52:52.317693200Z" level=info msg="StartContainer for \"1abd541d3029e12d3d409b349825f4e1e8586848deb70cae9bf807348b7847ff\" returns successfully" Jul 15 11:52:52.239725 systemd[1]: Started cri-containerd-9a2e30c26537cb22929ed2a1706326694ea416cd4dcebafc3274ae8ebb19c692.scope. Jul 15 11:52:52.348358 env[1245]: time="2025-07-15T11:52:52.348333808Z" level=info msg="StartContainer for \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\" returns successfully" Jul 15 11:52:53.463463 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3627459147.mount: Deactivated successfully. Jul 15 11:52:55.663125 env[1245]: time="2025-07-15T11:52:55.646881927Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:55.663125 env[1245]: time="2025-07-15T11:52:55.659602678Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:55.663125 env[1245]: time="2025-07-15T11:52:55.661487494Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:55.663125 env[1245]: time="2025-07-15T11:52:55.663654654Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:52:55.663125 env[1245]: time="2025-07-15T11:52:55.663944075Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:56.394 [WARNING][4952] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0", GenerateName:"calico-apiserver-759464fdbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b0b115b-c4c6-4d3f-942e-84cda13fa272", ResourceVersion:"1064", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"759464fdbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6", Pod:"calico-apiserver-759464fdbd-8t76s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali764f7c218ea", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:56.561 [INFO][4952] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:56.563 [INFO][4952] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" iface="eth0" netns="" Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:56.566 [INFO][4952] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:56.566 [INFO][4952] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:57.879 [INFO][5087] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" HandleID="k8s-pod-network.a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:57.903 [INFO][5087] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:57.906 [INFO][5087] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:58.123 [WARNING][5087] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" HandleID="k8s-pod-network.a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:58.128 [INFO][5087] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" HandleID="k8s-pod-network.a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:58.131 [INFO][5087] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:52:58.215082 env[1245]: 2025-07-15 11:52:58.178 [INFO][4952] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:52:58.215082 env[1245]: time="2025-07-15T11:52:58.212057415Z" level=info msg="TearDown network for sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\" successfully" Jul 15 11:52:58.215082 env[1245]: time="2025-07-15T11:52:58.212080830Z" level=info msg="StopPodSandbox for \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\" returns successfully" Jul 15 11:52:58.653858 kubelet[2102]: E0715 11:52:57.835671 2102 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.597s" Jul 15 11:52:59.399000 audit[4991]: AVC avc: denied { watch } for pid=4991 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_46.3179759843/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c442,c842 tclass=file permissive=0 Jul 15 11:52:59.509488 kernel: kauditd_printk_skb: 233 callbacks suppressed Jul 15 11:52:59.524411 kernel: audit: type=1400 audit(1752580379.399:1540): avc: denied { watch } for pid=4991 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_46.3179759843/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c442,c842 tclass=file permissive=0 Jul 15 11:52:59.531613 kernel: audit: type=1300 audit(1752580379.399:1540): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000e9a660 a2=fc6 a3=0 items=0 ppid=4888 pid=4991 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 key=(null) Jul 15 11:52:59.531675 kernel: audit: type=1327 audit(1752580379.399:1540): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:52:59.533233 kernel: audit: type=1400 audit(1752580379.400:1541): avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1594250199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c521 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c368,c521 tclass=file permissive=0 Jul 15 11:52:59.537883 kernel: audit: type=1300 audit(1752580379.400:1541): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0013f6040 a2=fc6 a3=0 items=0 ppid=4408 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c521 key=(null) Jul 15 11:52:59.539571 kernel: audit: type=1327 audit(1752580379.400:1541): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:52:59.399000 audit[4991]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000e9a660 a2=fc6 a3=0 items=0 ppid=4888 pid=4991 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 key=(null) Jul 15 11:52:59.399000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:52:59.400000 audit[5002]: AVC avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1594250199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c521 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c368,c521 tclass=file permissive=0 Jul 15 11:52:59.400000 audit[5002]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0013f6040 a2=fc6 a3=0 items=0 ppid=4408 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c521 key=(null) Jul 15 11:52:59.400000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:53:15.013830 systemd[1]: Started sshd@7-139.178.70.107:22-147.75.109.163:52936.service. Jul 15 11:53:15.303790 kernel: audit: type=1130 audit(1752580395.033:1542): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.107:22-147.75.109.163:52936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:53:15.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.107:22-147.75.109.163:52936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:53:16.373000 audit[5115]: USER_ACCT pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:16.518461 kernel: audit: type=1101 audit(1752580396.373:1543): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:16.541275 kernel: audit: type=1103 audit(1752580396.493:1544): pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:16.543851 kernel: audit: type=1006 audit(1752580396.508:1545): pid=5115 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 15 11:53:16.546476 kernel: audit: type=1300 audit(1752580396.508:1545): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeffc70740 a2=3 a3=0 items=0 ppid=1 pid=5115 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:53:16.546500 kernel: audit: type=1327 audit(1752580396.508:1545): proctitle=737368643A20636F7265205B707269765D Jul 15 11:53:16.493000 audit[5115]: CRED_ACQ pid=5115 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:16.508000 audit[5115]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeffc70740 a2=3 a3=0 items=0 ppid=1 pid=5115 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:53:16.508000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:53:16.695077 sshd[5115]: Accepted publickey for core from 147.75.109.163 port 52936 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:53:16.547768 sshd[5115]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:53:16.933200 systemd-logind[1237]: New session 10 of user core. Jul 15 11:53:16.946674 systemd[1]: Started session-10.scope. Jul 15 11:53:17.023000 audit[5115]: USER_START pid=5115 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:17.058722 kernel: audit: type=1105 audit(1752580397.023:1546): pid=5115 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:17.099000 audit[5117]: CRED_ACQ pid=5117 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:17.104226 kernel: audit: type=1103 audit(1752580397.099:1547): pid=5117 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:43.744000 audit[4731]: AVC avc: denied { watch } for pid=4731 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1972882796/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c898 tclass=file permissive=0 Jul 15 11:53:44.452403 kernel: audit: type=1400 audit(1752580423.744:1548): avc: denied { watch } for pid=4731 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1972882796/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c898 tclass=file permissive=0 Jul 15 11:53:44.598478 kernel: audit: type=1300 audit(1752580423.744:1548): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001fc2380 a2=fc6 a3=0 items=0 ppid=3956 pid=4731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 key=(null) Jul 15 11:53:44.603575 kernel: audit: type=1327 audit(1752580423.744:1548): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:53:43.744000 audit[4731]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001fc2380 a2=fc6 a3=0 items=0 ppid=3956 pid=4731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 key=(null) Jul 15 11:53:43.744000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:53:44.800000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:44.837682 kernel: audit: type=1400 audit(1752580424.800:1549): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:44.866653 kernel: audit: type=1300 audit(1752580424.800:1549): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c41040 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:53:44.866719 kernel: audit: type=1327 audit(1752580424.800:1549): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:53:44.800000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c41040 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:53:44.800000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:53:44.945000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:44.952453 kernel: audit: type=1400 audit(1752580424.945:1550): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:44.957570 kernel: audit: type=1300 audit(1752580424.945:1550): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002197b00 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:53:44.960508 kernel: audit: type=1327 audit(1752580424.945:1550): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:53:44.945000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002197b00 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:53:44.945000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:53:45.281000 audit[4816]: AVC avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1645455470/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c446 tclass=file permissive=0 Jul 15 11:53:45.439828 kernel: audit: type=1400 audit(1752580425.281:1551): avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1645455470/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c446 tclass=file permissive=0 Jul 15 11:53:45.281000 audit[4816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002459080 a2=fc6 a3=0 items=0 ppid=4058 pid=4816 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 key=(null) Jul 15 11:53:45.281000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:53:45.287000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:45.287000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7d a1=c00d7aa7e0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:53:45.287000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:53:45.287000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:45.287000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=81 a1=c00fbb2180 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:53:45.287000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:53:45.557000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:45.557000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=84 a1=c00fbb21e0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:53:45.557000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:53:45.724000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:45.724000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=85 a1=c00d7aa8a0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:53:45.724000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:53:45.731000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:45.731000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00d85ad20 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:53:45.731000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:53:46.007000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:46.007000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=82 a1=c00d85bbf0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:53:46.007000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:53:48.016000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:48.016000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c000737b00 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:53:48.016000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:53:48.026000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:48.026000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c001bbe300 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:53:48.026000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:53:48.035000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:48.035000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000737b40 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:53:48.035000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:53:48.100000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:53:48.100000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000737d00 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:53:48.100000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:53:50.839637 systemd[1]: cri-containerd-6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77.scope: Deactivated successfully. Jul 15 11:53:51.029126 kernel: kauditd_printk_skb: 32 callbacks suppressed Jul 15 11:53:51.031778 kernel: audit: type=1334 audit(1752580430.849:1562): prog-id=114 op=UNLOAD Jul 15 11:53:51.035774 kernel: audit: type=1334 audit(1752580430.857:1563): prog-id=117 op=UNLOAD Jul 15 11:53:50.849000 audit: BPF prog-id=114 op=UNLOAD Jul 15 11:53:50.857000 audit: BPF prog-id=117 op=UNLOAD Jul 15 11:53:51.053009 env[1245]: time="2025-07-15T11:53:50.922044844Z" level=info msg="shim disconnected" id=6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77 Jul 15 11:53:51.053009 env[1245]: time="2025-07-15T11:53:50.922073565Z" level=warning msg="cleaning up after shim disconnected" id=6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77 namespace=k8s.io Jul 15 11:53:51.053009 env[1245]: time="2025-07-15T11:53:50.922080039Z" level=info msg="cleaning up dead shim" Jul 15 11:53:51.053009 env[1245]: time="2025-07-15T11:53:50.927729025Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:53:50Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5157 runtime=io.containerd.runc.v2\n" Jul 15 11:53:50.851079 systemd[1]: cri-containerd-6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77.scope: Consumed 5.021s CPU time. Jul 15 11:53:50.961134 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77-rootfs.mount: Deactivated successfully. Jul 15 11:53:51.725173 systemd[1]: cri-containerd-41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c.scope: Deactivated successfully. Jul 15 11:53:51.914217 kernel: audit: type=1334 audit(1752580431.729:1564): prog-id=81 op=UNLOAD Jul 15 11:53:51.924858 kernel: audit: type=1334 audit(1752580431.729:1565): prog-id=84 op=UNLOAD Jul 15 11:53:51.729000 audit: BPF prog-id=81 op=UNLOAD Jul 15 11:53:51.729000 audit: BPF prog-id=84 op=UNLOAD Jul 15 11:53:51.984581 env[1245]: time="2025-07-15T11:53:51.820842267Z" level=info msg="shim disconnected" id=41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c Jul 15 11:53:51.984581 env[1245]: time="2025-07-15T11:53:51.820871668Z" level=warning msg="cleaning up after shim disconnected" id=41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c namespace=k8s.io Jul 15 11:53:51.984581 env[1245]: time="2025-07-15T11:53:51.820878192Z" level=info msg="cleaning up dead shim" Jul 15 11:53:51.984581 env[1245]: time="2025-07-15T11:53:51.828038984Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:53:51Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5183 runtime=io.containerd.runc.v2\n" Jul 15 11:53:51.725341 systemd[1]: cri-containerd-41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c.scope: Consumed 1.331s CPU time. Jul 15 11:53:51.852913 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c-rootfs.mount: Deactivated successfully. Jul 15 11:53:53.181000 audit[5200]: NETFILTER_CFG table=filter:127 family=2 entries=14 op=nft_register_rule pid=5200 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:53:53.274547 kernel: audit: type=1325 audit(1752580433.181:1566): table=filter:127 family=2 entries=14 op=nft_register_rule pid=5200 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:53:53.282513 kernel: audit: type=1300 audit(1752580433.181:1566): arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff34832f80 a2=0 a3=7fff34832f6c items=0 ppid=2205 pid=5200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:53:53.284882 kernel: audit: type=1327 audit(1752580433.181:1566): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:53:53.292518 kernel: audit: type=1325 audit(1752580433.189:1567): table=nat:128 family=2 entries=68 op=nft_unregister_chain pid=5200 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:53:53.292586 kernel: audit: type=1300 audit(1752580433.189:1567): arch=c000003e syscall=46 success=yes exit=8580 a0=3 a1=7fff34832f80 a2=0 a3=7fff34832f6c items=0 ppid=2205 pid=5200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:53:53.292609 kernel: audit: type=1327 audit(1752580433.189:1567): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:53:53.181000 audit[5200]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff34832f80 a2=0 a3=7fff34832f6c items=0 ppid=2205 pid=5200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:53:53.181000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:53:53.189000 audit[5200]: NETFILTER_CFG table=nat:128 family=2 entries=68 op=nft_unregister_chain pid=5200 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:53:53.189000 audit[5200]: SYSCALL arch=c000003e syscall=46 success=yes exit=8580 a0=3 a1=7fff34832f80 a2=0 a3=7fff34832f6c items=0 ppid=2205 pid=5200 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:53:53.189000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:53:53.231000 audit[5204]: NETFILTER_CFG table=filter:129 family=2 entries=20 op=nft_register_rule pid=5204 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:53:53.231000 audit[5204]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffcfedc3d30 a2=0 a3=7ffcfedc3d1c items=0 ppid=2205 pid=5204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:53:53.231000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:53:53.235000 audit[5204]: NETFILTER_CFG table=nat:130 family=2 entries=26 op=nft_unregister_chain pid=5204 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:53:53.235000 audit[5204]: SYSCALL arch=c000003e syscall=46 success=yes exit=3212 a0=3 a1=7ffcfedc3d30 a2=0 a3=7ffcfedc3d1c items=0 ppid=2205 pid=5204 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:53:53.235000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:53:56.893468 env[1245]: time="2025-07-15T11:53:56.893336069Z" level=info msg="RemovePodSandbox for \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\"" Jul 15 11:53:56.893468 env[1245]: time="2025-07-15T11:53:56.893367179Z" level=info msg="Forcibly stopping sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\"" Jul 15 11:53:57.154980 kernel: kauditd_printk_skb: 6 callbacks suppressed Jul 15 11:53:57.161159 kernel: audit: type=1106 audit(1752580437.105:1570): pid=5115 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:57.169128 kernel: audit: type=1104 audit(1752580437.111:1571): pid=5115 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:57.171592 kernel: audit: type=1131 audit(1752580437.123:1572): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.107:22-147.75.109.163:52936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:53:57.105000 audit[5115]: USER_END pid=5115 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:57.111000 audit[5115]: CRED_DISP pid=5115 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:53:57.123000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.107:22-147.75.109.163:52936 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:53:56.958519 sshd[5115]: pam_unix(sshd:session): session closed for user core Jul 15 11:53:57.120207 systemd[1]: sshd@7-139.178.70.107:22-147.75.109.163:52936.service: Deactivated successfully. Jul 15 11:53:57.125064 systemd[1]: session-10.scope: Deactivated successfully. Jul 15 11:53:57.125147 systemd[1]: session-10.scope: Consumed 2.648s CPU time. Jul 15 11:53:57.127909 systemd-logind[1237]: Session 10 logged out. Waiting for processes to exit. Jul 15 11:53:57.154222 systemd-logind[1237]: Removed session 10. Jul 15 11:53:59.461000 audit[5002]: AVC avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1594250199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c521 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c368,c521 tclass=file permissive=0 Jul 15 11:53:59.625178 kernel: audit: type=1400 audit(1752580439.461:1573): avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1594250199/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c368,c521 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c368,c521 tclass=file permissive=0 Jul 15 11:53:59.635394 kernel: audit: type=1300 audit(1752580439.461:1573): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0026530c0 a2=fc6 a3=0 items=0 ppid=4408 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c521 key=(null) Jul 15 11:53:59.635456 kernel: audit: type=1327 audit(1752580439.461:1573): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:53:59.637721 kernel: audit: type=1400 audit(1752580439.489:1574): avc: denied { watch } for pid=4991 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_46.3179759843/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c442,c842 tclass=file permissive=0 Jul 15 11:53:59.637755 kernel: audit: type=1300 audit(1752580439.489:1574): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000f5bb60 a2=fc6 a3=0 items=0 ppid=4888 pid=4991 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 key=(null) Jul 15 11:53:59.637780 kernel: audit: type=1327 audit(1752580439.489:1574): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:53:59.461000 audit[5002]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0026530c0 a2=fc6 a3=0 items=0 ppid=4408 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c368,c521 key=(null) Jul 15 11:53:59.461000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:53:59.489000 audit[4991]: AVC avc: denied { watch } for pid=4991 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_46.3179759843/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c442,c842 tclass=file permissive=0 Jul 15 11:53:59.489000 audit[4991]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000f5bb60 a2=fc6 a3=0 items=0 ppid=4888 pid=4991 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 key=(null) Jul 15 11:53:59.489000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:53:59.577 [WARNING][5271] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0", GenerateName:"calico-apiserver-759464fdbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"1b0b115b-c4c6-4d3f-942e-84cda13fa272", ResourceVersion:"1064", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"759464fdbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6", Pod:"calico-apiserver-759464fdbd-8t76s", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali764f7c218ea", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:53:59.618 [INFO][5271] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:53:59.622 [INFO][5271] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" iface="eth0" netns="" Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:53:59.622 [INFO][5271] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:53:59.622 [INFO][5271] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:54:00.670 [INFO][5296] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" HandleID="k8s-pod-network.a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:54:00.689 [INFO][5296] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:54:00.694 [INFO][5296] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:54:00.812 [WARNING][5296] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" HandleID="k8s-pod-network.a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:54:00.812 [INFO][5296] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" HandleID="k8s-pod-network.a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:54:00.814 [INFO][5296] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:00.893437 env[1245]: 2025-07-15 11:54:00.851 [INFO][5271] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07" Jul 15 11:54:00.893437 env[1245]: time="2025-07-15T11:54:00.889893780Z" level=info msg="TearDown network for sandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\" successfully" Jul 15 11:54:00.995055 env[1245]: time="2025-07-15T11:54:00.929956018Z" level=info msg="RemovePodSandbox \"a2c15d81e9594bce848dd4aab9596ae39a1ab3bb0e0c477301372b8c1c39fb07\" returns successfully" Jul 15 11:54:01.958568 env[1245]: time="2025-07-15T11:54:01.958539735Z" level=info msg="StopPodSandbox for \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\"" Jul 15 11:54:02.029021 systemd[1]: Started sshd@8-139.178.70.107:22-147.75.109.163:45828.service. Jul 15 11:54:02.095243 kernel: audit: type=1130 audit(1752580442.033:1575): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.107:22-147.75.109.163:45828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:02.033000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.107:22-147.75.109.163:45828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:02.437650 kubelet[2102]: E0715 11:54:02.437586 2102 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1m1.368s" Jul 15 11:54:02.522000 audit[5309]: USER_ACCT pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:02.546087 kernel: audit: type=1101 audit(1752580442.522:1576): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:02.546142 kernel: audit: type=1103 audit(1752580442.528:1577): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:02.546163 kernel: audit: type=1006 audit(1752580442.528:1578): pid=5309 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=11 res=1 Jul 15 11:54:02.546181 kernel: audit: type=1300 audit(1752580442.528:1578): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe45ed5cb0 a2=3 a3=0 items=0 ppid=1 pid=5309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:02.548860 kernel: audit: type=1327 audit(1752580442.528:1578): proctitle=737368643A20636F7265205B707269765D Jul 15 11:54:02.528000 audit[5309]: CRED_ACQ pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:02.528000 audit[5309]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe45ed5cb0 a2=3 a3=0 items=0 ppid=1 pid=5309 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:02.528000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:54:02.595392 sshd[5309]: Accepted publickey for core from 147.75.109.163 port 45828 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:54:02.545114 sshd[5309]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:54:02.647112 systemd-logind[1237]: New session 11 of user core. Jul 15 11:54:02.652000 audit[5309]: USER_START pid=5309 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:02.649191 systemd[1]: Started session-11.scope. Jul 15 11:54:02.661257 kernel: audit: type=1105 audit(1752580442.652:1579): pid=5309 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:02.663803 kernel: audit: type=1103 audit(1752580442.656:1580): pid=5353 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:02.656000 audit[5353]: CRED_ACQ pid=5353 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:02.765786 systemd[1]: run-containerd-runc-k8s.io-f8fb2b3f90496de1bda8d513969b4b1a4823ca23f00aeb1648222b72cc3bffd1-runc.IjC40v.mount: Deactivated successfully. Jul 15 11:54:02.954864 env[1245]: time="2025-07-15T11:54:02.954612450Z" level=info msg="CreateContainer within sandbox \"e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 15 11:54:03.087880 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2620505876.mount: Deactivated successfully. Jul 15 11:54:03.128212 env[1245]: time="2025-07-15T11:54:03.114377326Z" level=info msg="CreateContainer within sandbox \"e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"869aa718f85073d3e3b83c5e7f175abcc3780df0b5561dba6dd5ac7567a6c3e8\"" Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:04.092 [WARNING][5330] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0", GenerateName:"calico-apiserver-cd64889bb-", Namespace:"calico-apiserver", SelfLink:"", UID:"deaa84fe-93ef-419a-b53c-7053a343ff7c", ResourceVersion:"1287", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cd64889bb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938", Pod:"calico-apiserver-cd64889bb-t28g6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali956d64c26a4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:04.194 [INFO][5330] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:04.198 [INFO][5330] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" iface="eth0" netns="" Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:04.201 [INFO][5330] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:04.201 [INFO][5330] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:06.648 [INFO][5382] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" HandleID="k8s-pod-network.ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:06.682 [INFO][5382] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:06.689 [INFO][5382] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:06.818 [WARNING][5382] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" HandleID="k8s-pod-network.ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:06.818 [INFO][5382] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" HandleID="k8s-pod-network.ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:06.819 [INFO][5382] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:06.901169 env[1245]: 2025-07-15 11:54:06.846 [INFO][5330] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:54:06.901169 env[1245]: time="2025-07-15T11:54:06.888689444Z" level=info msg="TearDown network for sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\" successfully" Jul 15 11:54:06.901169 env[1245]: time="2025-07-15T11:54:06.888712884Z" level=info msg="StopPodSandbox for \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\" returns successfully" Jul 15 11:54:11.578105 env[1245]: time="2025-07-15T11:54:11.570124949Z" level=info msg="RemovePodSandbox for \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\"" Jul 15 11:54:11.578105 env[1245]: time="2025-07-15T11:54:11.570156116Z" level=info msg="Forcibly stopping sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\"" Jul 15 11:54:11.578105 env[1245]: time="2025-07-15T11:54:11.570599623Z" level=info msg="StartContainer for \"869aa718f85073d3e3b83c5e7f175abcc3780df0b5561dba6dd5ac7567a6c3e8\"" Jul 15 11:54:11.740282 systemd[1]: Started cri-containerd-869aa718f85073d3e3b83c5e7f175abcc3780df0b5561dba6dd5ac7567a6c3e8.scope. Jul 15 11:54:11.776145 kernel: audit: type=1400 audit(1752580451.768:1581): avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.778550 kernel: audit: type=1300 audit(1752580451.768:1581): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014f6b0 a2=3c a3=7f8ad54862f8 items=0 ppid=4009 pid=5404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:11.779226 kernel: audit: type=1327 audit(1752580451.768:1581): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836396161373138663835303733643365336238336335653766313735 Jul 15 11:54:11.768000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.802075 kernel: audit: type=1400 audit(1752580451.768:1582): avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.805511 kernel: audit: type=1400 audit(1752580451.768:1582): avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.805538 kernel: audit: type=1400 audit(1752580451.768:1582): avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.808749 kernel: audit: type=1400 audit(1752580451.768:1582): avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.808810 kernel: audit: type=1400 audit(1752580451.768:1582): avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.808861 kernel: audit: type=1400 audit(1752580451.768:1582): avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.810817 kernel: audit: type=1400 audit(1752580451.768:1582): avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.768000 audit[5404]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c00014f6b0 a2=3c a3=7f8ad54862f8 items=0 ppid=4009 pid=5404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:11.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836396161373138663835303733643365336238336335653766313735 Jul 15 11:54:11.768000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.768000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.768000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.768000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.768000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.768000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.768000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.768000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.768000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.768000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.768000 audit: BPF prog-id=244 op=LOAD Jul 15 11:54:11.768000 audit[5404]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014f9d8 a2=78 a3=c000024238 items=0 ppid=4009 pid=5404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:11.768000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836396161373138663835303733643365336238336335653766313735 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit: BPF prog-id=245 op=LOAD Jul 15 11:54:11.771000 audit[5404]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c00014f770 a2=78 a3=c000024288 items=0 ppid=4009 pid=5404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:11.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836396161373138663835303733643365336238336335653766313735 Jul 15 11:54:11.771000 audit: BPF prog-id=245 op=UNLOAD Jul 15 11:54:11.771000 audit: BPF prog-id=244 op=UNLOAD Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { perfmon } for pid=5404 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit[5404]: AVC avc: denied { bpf } for pid=5404 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:11.771000 audit: BPF prog-id=246 op=LOAD Jul 15 11:54:11.771000 audit[5404]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c00014fc30 a2=78 a3=c000024318 items=0 ppid=4009 pid=5404 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:11.771000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3836396161373138663835303733643365336238336335653766313735 Jul 15 11:54:11.857783 env[1245]: time="2025-07-15T11:54:11.814458873Z" level=info msg="StartContainer for \"869aa718f85073d3e3b83c5e7f175abcc3780df0b5561dba6dd5ac7567a6c3e8\" returns successfully" Jul 15 11:54:12.859211 sshd[5309]: pam_unix(sshd:session): session closed for user core Jul 15 11:54:12.927000 audit[5309]: USER_END pid=5309 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:12.930000 audit[5309]: CRED_DISP pid=5309 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:12.962000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.107:22-147.75.109.163:45828 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:12.964157 systemd[1]: sshd@8-139.178.70.107:22-147.75.109.163:45828.service: Deactivated successfully. Jul 15 11:54:12.972971 systemd[1]: session-11.scope: Deactivated successfully. Jul 15 11:54:12.973335 systemd-logind[1237]: Session 11 logged out. Waiting for processes to exit. Jul 15 11:54:12.975806 systemd-logind[1237]: Removed session 11. Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.133 [WARNING][5421] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0", GenerateName:"calico-apiserver-cd64889bb-", Namespace:"calico-apiserver", SelfLink:"", UID:"deaa84fe-93ef-419a-b53c-7053a343ff7c", ResourceVersion:"1287", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"cd64889bb", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"aee5c8f4272dfad2d86af52d8808070cf02e711ec91391cedb46c74000432938", Pod:"calico-apiserver-cd64889bb-t28g6", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali956d64c26a4", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.141 [INFO][5421] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.141 [INFO][5421] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" iface="eth0" netns="" Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.141 [INFO][5421] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.141 [INFO][5421] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.772 [INFO][5448] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" HandleID="k8s-pod-network.ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.784 [INFO][5448] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.784 [INFO][5448] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.806 [WARNING][5448] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" HandleID="k8s-pod-network.ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.806 [INFO][5448] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" HandleID="k8s-pod-network.ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Workload="localhost-k8s-calico--apiserver--cd64889bb--t28g6-eth0" Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.816 [INFO][5448] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:13.840599 env[1245]: 2025-07-15 11:54:13.833 [INFO][5421] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98" Jul 15 11:54:13.865036 env[1245]: time="2025-07-15T11:54:13.840619138Z" level=info msg="TearDown network for sandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\" successfully" Jul 15 11:54:13.872141 env[1245]: time="2025-07-15T11:54:13.872104711Z" level=info msg="RemovePodSandbox \"ef5c828899ec23c67acbca6369daa549a8320265088c05adf50acc1bf6e14c98\" returns successfully" Jul 15 11:54:14.145876 env[1245]: time="2025-07-15T11:54:14.145793733Z" level=info msg="StopPodSandbox for \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\"" Jul 15 11:54:14.395750 kubelet[2102]: E0715 11:54:14.395722 2102 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="11.83s" Jul 15 11:54:14.739630 kubelet[2102]: I0715 11:54:14.739597 2102 scope.go:117] "RemoveContainer" containerID="6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77" Jul 15 11:54:15.173000 audit[5494]: NETFILTER_CFG table=filter:131 family=2 entries=21 op=nft_register_rule pid=5494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:54:15.173000 audit[5494]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffe659f19b0 a2=0 a3=7ffe659f199c items=0 ppid=2205 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:15.173000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:54:15.179000 audit[5494]: NETFILTER_CFG table=nat:132 family=2 entries=19 op=nft_register_chain pid=5494 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:54:15.179000 audit[5494]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffe659f19b0 a2=0 a3=7ffe659f199c items=0 ppid=2205 pid=5494 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:15.179000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:15.512 [WARNING][5483] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n9wvp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ce316714-6e1f-490d-9366-973c600e9360", ResourceVersion:"934", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc", Pod:"csi-node-driver-n9wvp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"caliecb523a9187", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:15.525 [INFO][5483] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:15.525 [INFO][5483] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" iface="eth0" netns="" Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:15.525 [INFO][5483] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:15.525 [INFO][5483] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:15.929 [INFO][5497] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" HandleID="k8s-pod-network.d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:15.943 [INFO][5497] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:15.945 [INFO][5497] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:16.076 [WARNING][5497] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" HandleID="k8s-pod-network.d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:16.076 [INFO][5497] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" HandleID="k8s-pod-network.d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:16.077 [INFO][5497] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:16.100538 env[1245]: 2025-07-15 11:54:16.085 [INFO][5483] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:54:16.100538 env[1245]: time="2025-07-15T11:54:16.101986551Z" level=info msg="TearDown network for sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\" successfully" Jul 15 11:54:16.100538 env[1245]: time="2025-07-15T11:54:16.102008073Z" level=info msg="StopPodSandbox for \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\" returns successfully" Jul 15 11:54:16.587880 env[1245]: time="2025-07-15T11:54:16.587849039Z" level=info msg="StopContainer for \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\" with timeout 30 (s)" Jul 15 11:54:16.588633 env[1245]: time="2025-07-15T11:54:16.588084870Z" level=info msg="Stop container \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\" with signal terminated" Jul 15 11:54:16.636160 systemd[1]: cri-containerd-0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668.scope: Deactivated successfully. Jul 15 11:54:16.641000 audit: BPF prog-id=240 op=UNLOAD Jul 15 11:54:16.659000 audit: BPF prog-id=243 op=UNLOAD Jul 15 11:54:16.669270 env[1245]: time="2025-07-15T11:54:16.664407734Z" level=info msg="shim disconnected" id=0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668 Jul 15 11:54:16.669270 env[1245]: time="2025-07-15T11:54:16.664433976Z" level=warning msg="cleaning up after shim disconnected" id=0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668 namespace=k8s.io Jul 15 11:54:16.669270 env[1245]: time="2025-07-15T11:54:16.664450655Z" level=info msg="cleaning up dead shim" Jul 15 11:54:16.672453 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668-rootfs.mount: Deactivated successfully. Jul 15 11:54:16.674092 env[1245]: time="2025-07-15T11:54:16.673634914Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:54:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5521 runtime=io.containerd.runc.v2\n" Jul 15 11:54:16.675208 env[1245]: time="2025-07-15T11:54:16.674779258Z" level=info msg="StopContainer for \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\" returns successfully" Jul 15 11:54:16.762045 env[1245]: time="2025-07-15T11:54:16.759486822Z" level=info msg="StopPodSandbox for \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\"" Jul 15 11:54:16.762045 env[1245]: time="2025-07-15T11:54:16.759523663Z" level=info msg="Container to stop \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 15 11:54:16.762045 env[1245]: time="2025-07-15T11:54:16.759525176Z" level=info msg="RemovePodSandbox for \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\"" Jul 15 11:54:16.762045 env[1245]: time="2025-07-15T11:54:16.759539799Z" level=info msg="Forcibly stopping sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\"" Jul 15 11:54:16.761500 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6-shm.mount: Deactivated successfully. Jul 15 11:54:16.766000 audit: BPF prog-id=193 op=UNLOAD Jul 15 11:54:16.767803 systemd[1]: cri-containerd-279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6.scope: Deactivated successfully. Jul 15 11:54:16.774603 kernel: kauditd_printk_skb: 45 callbacks suppressed Jul 15 11:54:16.774687 kernel: audit: type=1334 audit(1752580456.771:1595): prog-id=196 op=UNLOAD Jul 15 11:54:16.771000 audit: BPF prog-id=196 op=UNLOAD Jul 15 11:54:16.791426 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6-rootfs.mount: Deactivated successfully. Jul 15 11:54:16.792394 env[1245]: time="2025-07-15T11:54:16.792346540Z" level=info msg="shim disconnected" id=279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6 Jul 15 11:54:16.792450 env[1245]: time="2025-07-15T11:54:16.792392247Z" level=warning msg="cleaning up after shim disconnected" id=279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6 namespace=k8s.io Jul 15 11:54:16.792450 env[1245]: time="2025-07-15T11:54:16.792399389Z" level=info msg="cleaning up dead shim" Jul 15 11:54:16.799288 env[1245]: time="2025-07-15T11:54:16.799263308Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:54:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5558 runtime=io.containerd.runc.v2\n" Jul 15 11:54:16.824074 kubelet[2102]: E0715 11:54:16.824053 2102 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.413s" Jul 15 11:54:16.850954 env[1245]: time="2025-07-15T11:54:16.850772979Z" level=info msg="CreateContainer within sandbox \"ba2e4c8056de224260be7c24147a56744d85378334c91e8ce79f9c17428fe4d6\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 15 11:54:16.881681 kubelet[2102]: I0715 11:54:16.881662 2102 scope.go:117] "RemoveContainer" containerID="41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c" Jul 15 11:54:16.892469 env[1245]: time="2025-07-15T11:54:16.892397805Z" level=info msg="CreateContainer within sandbox \"0484e9e7eeeb3a1380931355efbe852caad27ef8b625add30e5e966d4487b41d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Jul 15 11:54:16.922227 env[1245]: time="2025-07-15T11:54:16.922193416Z" level=info msg="CreateContainer within sandbox \"ba2e4c8056de224260be7c24147a56744d85378334c91e8ce79f9c17428fe4d6\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821\"" Jul 15 11:54:16.922712 env[1245]: time="2025-07-15T11:54:16.922619455Z" level=info msg="StartContainer for \"32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821\"" Jul 15 11:54:16.927234 kubelet[2102]: I0715 11:54:16.927205 2102 csi_plugin.go:100] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 15 11:54:16.927385 kubelet[2102]: I0715 11:54:16.927377 2102 csi_plugin.go:113] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 15 11:54:16.933202 kubelet[2102]: I0715 11:54:16.931996 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-759464fdbd-8t76s" podStartSLOduration=118.286012373 podStartE2EDuration="2m15.931975833s" podCreationTimestamp="2025-07-15 11:52:01 +0000 UTC" firstStartedPulling="2025-07-15 11:52:34.243969388 +0000 UTC m=+43.577215392" lastFinishedPulling="2025-07-15 11:52:51.889932847 +0000 UTC m=+61.223178852" observedRunningTime="2025-07-15 11:54:16.89686782 +0000 UTC m=+146.230113832" watchObservedRunningTime="2025-07-15 11:54:16.931975833 +0000 UTC m=+146.265221848" Jul 15 11:54:16.963716 systemd[1]: Started cri-containerd-32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821.scope. Jul 15 11:54:17.004147 kernel: audit: type=1400 audit(1752580456.986:1596): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.005686 kernel: audit: type=1400 audit(1752580456.986:1597): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.008599 kernel: audit: type=1400 audit(1752580456.986:1598): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.008626 kernel: audit: type=1400 audit(1752580456.986:1599): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.023875 kernel: audit: type=1400 audit(1752580456.986:1600): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.034655 kernel: audit: type=1400 audit(1752580456.986:1601): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.034699 kernel: audit: type=1400 audit(1752580456.986:1602): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.037847 kernel: audit: type=1400 audit(1752580456.986:1603): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.041088 kernel: audit: type=1400 audit(1752580456.986:1604): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.986000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.986000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit: BPF prog-id=247 op=LOAD Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[5611]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=2228 pid=5611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:16.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332343635613638326135373638626530623332326365623730396533 Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[5611]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=2228 pid=5611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:16.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332343635613638326135373638626530623332326365623730396533 Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.987000 audit: BPF prog-id=248 op=LOAD Jul 15 11:54:16.987000 audit[5611]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0002788d0 items=0 ppid=2228 pid=5611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:16.987000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332343635613638326135373638626530623332326365623730396533 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit: BPF prog-id=249 op=LOAD Jul 15 11:54:16.993000 audit[5611]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000278918 items=0 ppid=2228 pid=5611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:16.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332343635613638326135373638626530623332326365623730396533 Jul 15 11:54:16.993000 audit: BPF prog-id=249 op=UNLOAD Jul 15 11:54:16.993000 audit: BPF prog-id=248 op=UNLOAD Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { perfmon } for pid=5611 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit[5611]: AVC avc: denied { bpf } for pid=5611 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:16.993000 audit: BPF prog-id=250 op=LOAD Jul 15 11:54:16.993000 audit[5611]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000278d28 items=0 ppid=2228 pid=5611 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:16.993000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3332343635613638326135373638626530623332326365623730396533 Jul 15 11:54:17.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit: BPF prog-id=251 op=LOAD Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=1839 pid=5648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:17.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136303265326635646363376238333736313662343763323466326666 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=8 items=0 ppid=1839 pid=5648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:17.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136303265326635646363376238333736313662343763323466326666 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit: BPF prog-id=252 op=LOAD Jul 15 11:54:17.102000 audit[5648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c00039c210 items=0 ppid=1839 pid=5648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:17.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136303265326635646363376238333736313662343763323466326666 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit: BPF prog-id=253 op=LOAD Jul 15 11:54:17.102000 audit[5648]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c00039c258 items=0 ppid=1839 pid=5648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:17.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136303265326635646363376238333736313662343763323466326666 Jul 15 11:54:17.102000 audit: BPF prog-id=253 op=UNLOAD Jul 15 11:54:17.102000 audit: BPF prog-id=252 op=UNLOAD Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { perfmon } for pid=5648 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit[5648]: AVC avc: denied { bpf } for pid=5648 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:54:17.102000 audit: BPF prog-id=254 op=LOAD Jul 15 11:54:17.102000 audit[5648]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c00039c668 items=0 ppid=1839 pid=5648 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:17.102000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6136303265326635646363376238333736313662343763323466326666 Jul 15 11:54:17.111497 env[1245]: time="2025-07-15T11:54:17.033610826Z" level=info msg="CreateContainer within sandbox \"0484e9e7eeeb3a1380931355efbe852caad27ef8b625add30e5e966d4487b41d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce\"" Jul 15 11:54:17.111497 env[1245]: time="2025-07-15T11:54:17.037362955Z" level=info msg="StartContainer for \"32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821\" returns successfully" Jul 15 11:54:17.111497 env[1245]: time="2025-07-15T11:54:17.055873207Z" level=info msg="StartContainer for \"a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce\"" Jul 15 11:54:17.071214 systemd[1]: Started cri-containerd-a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce.scope. Jul 15 11:54:17.154796 kubelet[2102]: I0715 11:54:17.154732 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-6cdcfb8994-hqlqp" podStartSLOduration=116.397531526 podStartE2EDuration="2m14.15471529s" podCreationTimestamp="2025-07-15 11:52:03 +0000 UTC" firstStartedPulling="2025-07-15 11:52:31.23219298 +0000 UTC m=+40.565438981" lastFinishedPulling="2025-07-15 11:52:48.989376741 +0000 UTC m=+58.322622745" observedRunningTime="2025-07-15 11:54:17.153992635 +0000 UTC m=+146.487238648" watchObservedRunningTime="2025-07-15 11:54:17.15471529 +0000 UTC m=+146.487961302" Jul 15 11:54:17.155826 env[1245]: time="2025-07-15T11:54:17.155795692Z" level=info msg="StartContainer for \"a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce\" returns successfully" Jul 15 11:54:17.279972 kubelet[2102]: I0715 11:54:17.279936 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-cd64889bb-ph9z4" podStartSLOduration=92.27992183 podStartE2EDuration="1m32.27992183s" podCreationTimestamp="2025-07-15 11:52:45 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:54:17.257700432 +0000 UTC m=+146.590946443" watchObservedRunningTime="2025-07-15 11:54:17.27992183 +0000 UTC m=+146.613167851" Jul 15 11:54:17.751906 systemd[1]: run-containerd-runc-k8s.io-9a2e30c26537cb22929ed2a1706326694ea416cd4dcebafc3274ae8ebb19c692-runc.wSGGko.mount: Deactivated successfully. Jul 15 11:54:17.907225 systemd[1]: Started sshd@9-139.178.70.107:22-147.75.109.163:43124.service. Jul 15 11:54:17.909000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.107:22-147.75.109.163:43124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:18.229000 audit[5686]: NETFILTER_CFG table=filter:133 family=2 entries=14 op=nft_register_rule pid=5686 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:54:18.229000 audit[5686]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff60abf3d0 a2=0 a3=7fff60abf3bc items=0 ppid=2205 pid=5686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:18.229000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:54:18.255000 audit[5686]: NETFILTER_CFG table=nat:134 family=2 entries=72 op=nft_register_chain pid=5686 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:54:18.255000 audit[5686]: SYSCALL arch=c000003e syscall=46 success=yes exit=32476 a0=3 a1=7fff60abf3d0 a2=0 a3=7fff60abf3bc items=0 ppid=2205 pid=5686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:18.255000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:54:18.316000 audit[5690]: NETFILTER_CFG table=filter:135 family=2 entries=8 op=nft_register_rule pid=5690 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:54:18.316000 audit[5690]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc63d6bce0 a2=0 a3=7ffc63d6bccc items=0 ppid=2205 pid=5690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:18.316000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:54:18.322000 audit[5690]: NETFILTER_CFG table=nat:136 family=2 entries=26 op=nft_register_rule pid=5690 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:54:18.322000 audit[5690]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffc63d6bce0 a2=0 a3=7ffc63d6bccc items=0 ppid=2205 pid=5690 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:18.322000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:54:18.492015 sshd[5680]: Accepted publickey for core from 147.75.109.163 port 43124 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:54:18.490000 audit[5680]: USER_ACCT pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:18.494000 audit[5680]: CRED_ACQ pid=5680 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:18.494000 audit[5680]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff26e27b70 a2=3 a3=0 items=0 ppid=1 pid=5680 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:18.494000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:54:18.512901 sshd[5680]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:54:18.749396 systemd-logind[1237]: New session 12 of user core. Jul 15 11:54:18.762609 systemd[1]: Started session-12.scope. Jul 15 11:54:18.770000 audit[5680]: USER_START pid=5680 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:18.771000 audit[5697]: CRED_ACQ pid=5697 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:19.240556 systemd-networkd[1058]: cali764f7c218ea: Link DOWN Jul 15 11:54:19.240562 systemd-networkd[1058]: cali764f7c218ea: Lost carrier Jul 15 11:54:20.002000 audit[5723]: NETFILTER_CFG table=filter:137 family=2 entries=59 op=nft_register_rule pid=5723 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:54:20.002000 audit[5723]: SYSCALL arch=c000003e syscall=46 success=yes exit=10132 a0=3 a1=7ffc0b0044d0 a2=0 a3=7ffc0b0044bc items=0 ppid=3428 pid=5723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:20.002000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:54:20.002000 audit[5723]: NETFILTER_CFG table=filter:138 family=2 entries=2 op=nft_unregister_chain pid=5723 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:54:20.002000 audit[5723]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffc0b0044d0 a2=0 a3=558fd5ae7000 items=0 ppid=3428 pid=5723 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:20.002000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:19.107 [INFO][5585] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:19.111 [INFO][5585] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" iface="eth0" netns="/var/run/netns/cni-7bae34d6-ae30-cb11-2a56-0a4e28e68606" Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:19.140 [INFO][5585] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" iface="eth0" netns="/var/run/netns/cni-7bae34d6-ae30-cb11-2a56-0a4e28e68606" Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:19.200 [INFO][5585] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" after=89.40567ms iface="eth0" netns="/var/run/netns/cni-7bae34d6-ae30-cb11-2a56-0a4e28e68606" Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:19.200 [INFO][5585] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:19.208 [INFO][5585] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:19.779 [INFO][5707] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:19.825 [INFO][5707] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:19.828 [INFO][5707] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:21.329 [INFO][5707] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:21.359 [INFO][5707] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:21.369 [INFO][5707] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:21.448762 env[1245]: 2025-07-15 11:54:21.413 [INFO][5585] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:54:21.448762 env[1245]: time="2025-07-15T11:54:21.451364567Z" level=info msg="TearDown network for sandbox \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\" successfully" Jul 15 11:54:21.448762 env[1245]: time="2025-07-15T11:54:21.451404236Z" level=info msg="StopPodSandbox for \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\" returns successfully" Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:18.719 [WARNING][5586] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--n9wvp-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"ce316714-6e1f-490d-9366-973c600e9360", ResourceVersion:"934", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"57bd658777", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e1f122367d7e5c745a6a9fa0cfb2bc23f010e0634fa3148d97b9d1e83c6c09bc", Pod:"csi-node-driver-n9wvp", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"caliecb523a9187", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:18.753 [INFO][5586] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:18.756 [INFO][5586] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" iface="eth0" netns="" Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:18.758 [INFO][5586] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:18.758 [INFO][5586] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:19.780 [INFO][5696] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" HandleID="k8s-pod-network.d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:19.825 [INFO][5696] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:21.369 [INFO][5696] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:21.494 [WARNING][5696] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" HandleID="k8s-pod-network.d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:21.494 [INFO][5696] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" HandleID="k8s-pod-network.d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Workload="localhost-k8s-csi--node--driver--n9wvp-eth0" Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:21.496 [INFO][5696] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:21.555537 env[1245]: 2025-07-15 11:54:21.497 [INFO][5586] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f" Jul 15 11:54:21.555537 env[1245]: time="2025-07-15T11:54:21.498498782Z" level=info msg="TearDown network for sandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\" successfully" Jul 15 11:54:21.555537 env[1245]: time="2025-07-15T11:54:21.525323055Z" level=info msg="RemovePodSandbox \"d836ca2eaceab343430c6770e4127f6a170ed63d375190c5b10eb40e01224d7f\" returns successfully" Jul 15 11:54:21.506728 systemd[1]: run-netns-cni\x2d7bae34d6\x2dae30\x2dcb11\x2d2a56\x2d0a4e28e68606.mount: Deactivated successfully. Jul 15 11:54:24.025609 env[1245]: time="2025-07-15T11:54:24.025315576Z" level=info msg="StopPodSandbox for \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\"" Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:24.739 [WARNING][5754] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3a284661-8d5c-4ec1-96bf-0c0515e97469", ResourceVersion:"1404", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 51, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e", Pod:"coredns-7c65d6cfc9-8mq62", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b12e30c640", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:24.747 [INFO][5754] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:24.747 [INFO][5754] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" iface="eth0" netns="" Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:24.747 [INFO][5754] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:24.747 [INFO][5754] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:25.135 [INFO][5766] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" HandleID="k8s-pod-network.b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:25.142 [INFO][5766] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:25.143 [INFO][5766] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:25.181 [WARNING][5766] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" HandleID="k8s-pod-network.b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:25.183 [INFO][5766] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" HandleID="k8s-pod-network.b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:25.184 [INFO][5766] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:25.205581 env[1245]: 2025-07-15 11:54:25.195 [INFO][5754] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:54:25.205581 env[1245]: time="2025-07-15T11:54:25.205757706Z" level=info msg="TearDown network for sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\" successfully" Jul 15 11:54:25.205581 env[1245]: time="2025-07-15T11:54:25.205782008Z" level=info msg="StopPodSandbox for \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\" returns successfully" Jul 15 11:54:26.799122 sshd[5680]: pam_unix(sshd:session): session closed for user core Jul 15 11:54:26.870813 kernel: kauditd_printk_skb: 131 callbacks suppressed Jul 15 11:54:26.872853 kernel: audit: type=1130 audit(1752580466.834:1644): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.107:22-147.75.109.163:36834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:26.875087 kernel: audit: type=1106 audit(1752580466.845:1645): pid=5680 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:26.875905 kernel: audit: type=1104 audit(1752580466.850:1646): pid=5680 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:26.875931 kernel: audit: type=1131 audit(1752580466.857:1647): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.107:22-147.75.109.163:43124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:26.834000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.107:22-147.75.109.163:36834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:26.845000 audit[5680]: USER_END pid=5680 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:26.850000 audit[5680]: CRED_DISP pid=5680 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:26.857000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.107:22-147.75.109.163:43124 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:26.833060 systemd[1]: Started sshd@10-139.178.70.107:22-147.75.109.163:36834.service. Jul 15 11:54:26.858949 systemd[1]: sshd@9-139.178.70.107:22-147.75.109.163:43124.service: Deactivated successfully. Jul 15 11:54:26.864740 systemd[1]: session-12.scope: Deactivated successfully. Jul 15 11:54:26.864847 systemd[1]: session-12.scope: Consumed 1.216s CPU time. Jul 15 11:54:26.866040 systemd-logind[1237]: Session 12 logged out. Waiting for processes to exit. Jul 15 11:54:26.866794 systemd-logind[1237]: Removed session 12. Jul 15 11:54:26.949000 audit[5775]: USER_ACCT pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:26.951709 sshd[5775]: Accepted publickey for core from 147.75.109.163 port 36834 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:54:26.954548 kernel: audit: type=1101 audit(1752580466.949:1648): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:26.953000 audit[5775]: CRED_ACQ pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:26.959813 kernel: audit: type=1103 audit(1752580466.953:1649): pid=5775 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:26.959850 kernel: audit: type=1006 audit(1752580466.953:1650): pid=5775 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 15 11:54:26.953000 audit[5775]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4a2929c0 a2=3 a3=0 items=0 ppid=1 pid=5775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:26.984632 kernel: audit: type=1300 audit(1752580466.953:1650): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd4a2929c0 a2=3 a3=0 items=0 ppid=1 pid=5775 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:26.984682 kernel: audit: type=1327 audit(1752580466.953:1650): proctitle=737368643A20636F7265205B707269765D Jul 15 11:54:26.953000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:54:26.963392 sshd[5775]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:54:27.011305 systemd[1]: Started session-13.scope. Jul 15 11:54:27.011597 systemd-logind[1237]: New session 13 of user core. Jul 15 11:54:27.016000 audit[5775]: USER_START pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:27.022457 kernel: audit: type=1105 audit(1752580467.016:1651): pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:27.021000 audit[5778]: CRED_ACQ pid=5778 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:27.305899 env[1245]: time="2025-07-15T11:54:27.305659606Z" level=info msg="RemovePodSandbox for \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\"" Jul 15 11:54:27.305899 env[1245]: time="2025-07-15T11:54:27.305687018Z" level=info msg="Forcibly stopping sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\"" Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:27.856 [WARNING][5811] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"3a284661-8d5c-4ec1-96bf-0c0515e97469", ResourceVersion:"1404", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 51, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"a90445955c7fc574be9cc5614a75ff0acdc21b07e15d783156a9b769f186d98e", Pod:"coredns-7c65d6cfc9-8mq62", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali4b12e30c640", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:27.862 [INFO][5811] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:27.862 [INFO][5811] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" iface="eth0" netns="" Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:27.862 [INFO][5811] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:27.862 [INFO][5811] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:28.128 [INFO][5818] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" HandleID="k8s-pod-network.b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:28.136 [INFO][5818] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:28.136 [INFO][5818] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:28.157 [WARNING][5818] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" HandleID="k8s-pod-network.b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:28.157 [INFO][5818] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" HandleID="k8s-pod-network.b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Workload="localhost-k8s-coredns--7c65d6cfc9--8mq62-eth0" Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:28.158 [INFO][5818] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:28.168240 env[1245]: 2025-07-15 11:54:28.163 [INFO][5811] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917" Jul 15 11:54:28.168240 env[1245]: time="2025-07-15T11:54:28.168411745Z" level=info msg="TearDown network for sandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\" successfully" Jul 15 11:54:28.205839 env[1245]: time="2025-07-15T11:54:28.179610159Z" level=info msg="RemovePodSandbox \"b3a9c02dbe70bbe09b3a00f40f1a8b13d1fb1f3939e19e1393be185a5d7bb917\" returns successfully" Jul 15 11:54:30.479062 env[1245]: time="2025-07-15T11:54:30.478782708Z" level=info msg="StopPodSandbox for \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\"" Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:30.950 [WARNING][5834] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"84c60641-bf5d-4300-a575-76fcec4a7ca4", ResourceVersion:"1371", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139", Pod:"goldmane-58fd7646b9-v6rqg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califb771d6bdae", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:30.963 [INFO][5834] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:30.963 [INFO][5834] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" iface="eth0" netns="" Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:30.963 [INFO][5834] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:30.963 [INFO][5834] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:31.402 [INFO][5842] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" HandleID="k8s-pod-network.f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:31.409 [INFO][5842] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:31.412 [INFO][5842] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:31.477 [WARNING][5842] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" HandleID="k8s-pod-network.f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:31.477 [INFO][5842] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" HandleID="k8s-pod-network.f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:31.484 [INFO][5842] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:31.509969 env[1245]: 2025-07-15 11:54:31.493 [INFO][5834] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:54:31.509969 env[1245]: time="2025-07-15T11:54:31.510049473Z" level=info msg="TearDown network for sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\" successfully" Jul 15 11:54:31.509969 env[1245]: time="2025-07-15T11:54:31.510072888Z" level=info msg="StopPodSandbox for \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\" returns successfully" Jul 15 11:54:33.449323 env[1245]: time="2025-07-15T11:54:33.449293972Z" level=info msg="RemovePodSandbox for \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\"" Jul 15 11:54:33.449323 env[1245]: time="2025-07-15T11:54:33.449314063Z" level=info msg="Forcibly stopping sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\"" Jul 15 11:54:34.089158 systemd[1]: Started sshd@11-139.178.70.107:22-147.75.109.163:41764.service. Jul 15 11:54:34.186583 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:54:34.196430 kernel: audit: type=1130 audit(1752580474.091:1653): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.107:22-147.75.109.163:41764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:34.198036 kernel: audit: type=1106 audit(1752580474.154:1654): pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:34.198064 kernel: audit: type=1104 audit(1752580474.158:1655): pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:34.201436 kernel: audit: type=1131 audit(1752580474.171:1656): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.107:22-147.75.109.163:36834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:34.091000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.107:22-147.75.109.163:41764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:34.154000 audit[5775]: USER_END pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:34.158000 audit[5775]: CRED_DISP pid=5775 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:34.171000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.107:22-147.75.109.163:36834 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:34.102584 sshd[5775]: pam_unix(sshd:session): session closed for user core Jul 15 11:54:34.170102 systemd[1]: sshd@10-139.178.70.107:22-147.75.109.163:36834.service: Deactivated successfully. Jul 15 11:54:34.173058 systemd[1]: session-13.scope: Deactivated successfully. Jul 15 11:54:34.173143 systemd[1]: session-13.scope: Consumed 1.505s CPU time. Jul 15 11:54:34.173799 systemd-logind[1237]: Session 13 logged out. Waiting for processes to exit. Jul 15 11:54:34.174434 systemd-logind[1237]: Removed session 13. Jul 15 11:54:34.305000 audit[5869]: USER_ACCT pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:34.310086 sshd[5869]: Accepted publickey for core from 147.75.109.163 port 41764 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:54:34.313977 kernel: audit: type=1101 audit(1752580474.305:1657): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:34.314011 kernel: audit: type=1103 audit(1752580474.309:1658): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:34.314028 kernel: audit: type=1006 audit(1752580474.310:1659): pid=5869 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 15 11:54:34.315937 kernel: audit: type=1300 audit(1752580474.310:1659): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef54c5430 a2=3 a3=0 items=0 ppid=1 pid=5869 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:34.309000 audit[5869]: CRED_ACQ pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:34.310000 audit[5869]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffef54c5430 a2=3 a3=0 items=0 ppid=1 pid=5869 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:34.337515 kernel: audit: type=1327 audit(1752580474.310:1659): proctitle=737368643A20636F7265205B707269765D Jul 15 11:54:34.310000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:54:34.322867 sshd[5869]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:54:34.438424 systemd[1]: Started session-14.scope. Jul 15 11:54:34.442000 audit[5869]: USER_START pid=5869 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:34.439696 systemd-logind[1237]: New session 14 of user core. Jul 15 11:54:34.450194 kernel: audit: type=1105 audit(1752580474.442:1660): pid=5869 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:34.452000 audit[5872]: CRED_ACQ pid=5872 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:33.879 [WARNING][5857] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0", GenerateName:"goldmane-58fd7646b9-", Namespace:"calico-system", SelfLink:"", UID:"84c60641-bf5d-4300-a575-76fcec4a7ca4", ResourceVersion:"1371", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 2, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"58fd7646b9", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"5b1d870de766124bef2f6061d0e2777ff665a815f723d457c059230063902139", Pod:"goldmane-58fd7646b9-v6rqg", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"califb771d6bdae", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:33.893 [INFO][5857] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:33.893 [INFO][5857] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" iface="eth0" netns="" Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:33.893 [INFO][5857] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:33.893 [INFO][5857] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:34.776 [INFO][5864] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" HandleID="k8s-pod-network.f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:34.813 [INFO][5864] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:34.818 [INFO][5864] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:35.041 [WARNING][5864] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" HandleID="k8s-pod-network.f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:35.043 [INFO][5864] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" HandleID="k8s-pod-network.f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Workload="localhost-k8s-goldmane--58fd7646b9--v6rqg-eth0" Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:35.045 [INFO][5864] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:35.123139 env[1245]: 2025-07-15 11:54:35.085 [INFO][5857] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a" Jul 15 11:54:35.123139 env[1245]: time="2025-07-15T11:54:35.122949141Z" level=info msg="TearDown network for sandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\" successfully" Jul 15 11:54:35.232250 env[1245]: time="2025-07-15T11:54:35.170973635Z" level=info msg="RemovePodSandbox \"f04f11cfb2eaac7526c4e9e78b852b694f9da79d71d59e01e8e642bc111dd35a\" returns successfully" Jul 15 11:54:39.056390 env[1245]: time="2025-07-15T11:54:39.047757863Z" level=info msg="StopPodSandbox for \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\"" Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:39.622 [WARNING][5889] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0", GenerateName:"calico-apiserver-759464fdbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"12ff45d2-4237-4a75-a49b-5d1934e0deb7", ResourceVersion:"1403", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"759464fdbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c", Pod:"calico-apiserver-759464fdbd-cvd46", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibd21ab51d78", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:39.635 [INFO][5889] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:39.635 [INFO][5889] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" iface="eth0" netns="" Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:39.635 [INFO][5889] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:39.635 [INFO][5889] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:40.053 [INFO][5896] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" HandleID="k8s-pod-network.4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:40.077 [INFO][5896] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:40.082 [INFO][5896] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:40.432 [WARNING][5896] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" HandleID="k8s-pod-network.4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:40.435 [INFO][5896] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" HandleID="k8s-pod-network.4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:40.437 [INFO][5896] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:40.540968 env[1245]: 2025-07-15 11:54:40.487 [INFO][5889] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:54:40.540968 env[1245]: time="2025-07-15T11:54:40.532902047Z" level=info msg="TearDown network for sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\" successfully" Jul 15 11:54:40.540968 env[1245]: time="2025-07-15T11:54:40.532925028Z" level=info msg="StopPodSandbox for \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\" returns successfully" Jul 15 11:54:42.519679 env[1245]: time="2025-07-15T11:54:42.518571499Z" level=info msg="RemovePodSandbox for \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\"" Jul 15 11:54:42.519679 env[1245]: time="2025-07-15T11:54:42.518606490Z" level=info msg="Forcibly stopping sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\"" Jul 15 11:54:44.372776 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:54:44.446433 kernel: audit: type=1400 audit(1752580484.348:1662): avc: denied { watch } for pid=4731 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1972882796/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c898 tclass=file permissive=0 Jul 15 11:54:44.455034 kernel: audit: type=1300 audit(1752580484.348:1662): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001f13d20 a2=fc6 a3=0 items=0 ppid=3956 pid=4731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 key=(null) Jul 15 11:54:44.455147 kernel: audit: type=1327 audit(1752580484.348:1662): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:54:44.348000 audit[4731]: AVC avc: denied { watch } for pid=4731 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1972882796/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c898 tclass=file permissive=0 Jul 15 11:54:44.348000 audit[4731]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001f13d20 a2=fc6 a3=0 items=0 ppid=3956 pid=4731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 key=(null) Jul 15 11:54:44.348000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:54:45.170000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:45.373589 kernel: audit: type=1400 audit(1752580485.170:1663): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:45.384462 kernel: audit: type=1300 audit(1752580485.170:1663): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001bbfa20 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:54:45.390725 kernel: audit: type=1327 audit(1752580485.170:1663): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:54:45.390754 kernel: audit: type=1400 audit(1752580485.187:1664): avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:45.390777 kernel: audit: type=1300 audit(1752580485.187:1664): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0025cedb0 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:54:45.390794 kernel: audit: type=1327 audit(1752580485.187:1664): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:54:45.392278 kernel: audit: type=1400 audit(1752580485.330:1665): avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1645455470/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c446 tclass=file permissive=0 Jul 15 11:54:45.170000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001bbfa20 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:54:45.170000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:54:45.187000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:45.187000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0025cedb0 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:54:45.187000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:54:45.330000 audit[4816]: AVC avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1645455470/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c446 tclass=file permissive=0 Jul 15 11:54:45.330000 audit[4816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001654000 a2=fc6 a3=0 items=0 ppid=4058 pid=4816 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 key=(null) Jul 15 11:54:45.330000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:43.747 [WARNING][5929] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0", GenerateName:"calico-apiserver-759464fdbd-", Namespace:"calico-apiserver", SelfLink:"", UID:"12ff45d2-4237-4a75-a49b-5d1934e0deb7", ResourceVersion:"1403", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 1, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"759464fdbd", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c", Pod:"calico-apiserver-759464fdbd-cvd46", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calibd21ab51d78", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:43.794 [INFO][5929] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:43.796 [INFO][5929] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" iface="eth0" netns="" Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:43.797 [INFO][5929] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:43.797 [INFO][5929] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:45.099 [INFO][5940] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" HandleID="k8s-pod-network.4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:45.133 [INFO][5940] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:45.135 [INFO][5940] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:45.701 [WARNING][5940] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" HandleID="k8s-pod-network.4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:45.716 [INFO][5940] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" HandleID="k8s-pod-network.4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:45.728 [INFO][5940] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:54:45.788147 env[1245]: 2025-07-15 11:54:45.762 [INFO][5929] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306" Jul 15 11:54:45.813000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:45.813000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c003e565e0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:54:45.813000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:54:45.813000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:45.813000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c0097ed1d0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:54:45.813000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:54:45.870321 env[1245]: time="2025-07-15T11:54:45.788166304Z" level=info msg="TearDown network for sandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\" successfully" Jul 15 11:54:45.870321 env[1245]: time="2025-07-15T11:54:45.822038667Z" level=info msg="RemovePodSandbox \"4b214ff903f92fd57d2c92c1729f77cbe80d03e8f7500f44134c2b45e7061306\" returns successfully" Jul 15 11:54:45.926000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:45.926000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c0097ed230 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:54:45.926000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:54:45.996000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:45.996000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c009a04000 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:54:45.996000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:54:46.018000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:46.018000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:46.018000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c009a04a20 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:54:46.018000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:54:46.018000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=70 a1=c004b515c0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:54:46.018000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:54:48.168000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:48.168000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000b5b880 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:54:48.168000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:54:48.181000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:48.181000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001bbfe40 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:54:48.181000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:54:48.201000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:48.201000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001bbfe60 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:54:48.201000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:54:48.214000 audit[1957]: AVC avc: denied { watch } for pid=1957 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:54:48.214000 audit[1957]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001bbfe80 a2=fc6 a3=0 items=0 ppid=1812 pid=1957 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:54:48.214000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:54:54.922249 sshd[5869]: pam_unix(sshd:session): session closed for user core Jul 15 11:54:55.028761 kernel: kauditd_printk_skb: 32 callbacks suppressed Jul 15 11:54:55.033083 kernel: audit: type=1106 audit(1752580494.983:1676): pid=5869 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:55.035141 kernel: audit: type=1104 audit(1752580494.988:1677): pid=5869 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:55.035168 kernel: audit: type=1130 audit(1752580494.988:1678): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.107:22-147.75.109.163:56972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:55.039308 kernel: audit: type=1131 audit(1752580494.988:1679): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.107:22-147.75.109.163:41764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:54.983000 audit[5869]: USER_END pid=5869 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:54.988000 audit[5869]: CRED_DISP pid=5869 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:54.988000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.107:22-147.75.109.163:56972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:54.988000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.107:22-147.75.109.163:41764 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:54.990388 systemd[1]: Started sshd@12-139.178.70.107:22-147.75.109.163:56972.service. Jul 15 11:54:54.990841 systemd[1]: sshd@11-139.178.70.107:22-147.75.109.163:41764.service: Deactivated successfully. Jul 15 11:54:54.991465 systemd[1]: session-14.scope: Deactivated successfully. Jul 15 11:54:54.991559 systemd[1]: session-14.scope: Consumed 2.919s CPU time. Jul 15 11:54:54.996171 systemd-logind[1237]: Session 14 logged out. Waiting for processes to exit. Jul 15 11:54:54.999984 systemd-logind[1237]: Removed session 14. Jul 15 11:54:55.086000 audit[5952]: USER_ACCT pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:55.090981 sshd[5952]: Accepted publickey for core from 147.75.109.163 port 56972 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:54:55.091458 kernel: audit: type=1101 audit(1752580495.086:1680): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:55.091000 audit[5952]: CRED_ACQ pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:55.097613 kernel: audit: type=1103 audit(1752580495.091:1681): pid=5952 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:55.097645 kernel: audit: type=1006 audit(1752580495.091:1682): pid=5952 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 15 11:54:55.100782 kernel: audit: type=1300 audit(1752580495.091:1682): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff93b82840 a2=3 a3=0 items=0 ppid=1 pid=5952 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:55.091000 audit[5952]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff93b82840 a2=3 a3=0 items=0 ppid=1 pid=5952 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:55.112593 kernel: audit: type=1327 audit(1752580495.091:1682): proctitle=737368643A20636F7265205B707269765D Jul 15 11:54:55.091000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:54:55.097771 sshd[5952]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:54:55.141475 systemd-logind[1237]: New session 15 of user core. Jul 15 11:54:55.142218 systemd[1]: Started session-15.scope. Jul 15 11:54:55.148000 audit[5952]: USER_START pid=5952 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:55.152000 audit[5955]: CRED_ACQ pid=5955 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:55.154468 kernel: audit: type=1105 audit(1752580495.148:1683): pid=5952 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:56.634465 sshd[5952]: pam_unix(sshd:session): session closed for user core Jul 15 11:54:56.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.107:22-147.75.109.163:56986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:56.701000 audit[5952]: USER_END pid=5952 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:56.704000 audit[5952]: CRED_DISP pid=5952 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:56.705000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.107:22-147.75.109.163:56972 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:54:56.699321 systemd[1]: Started sshd@13-139.178.70.107:22-147.75.109.163:56986.service. Jul 15 11:54:56.706703 systemd[1]: sshd@12-139.178.70.107:22-147.75.109.163:56972.service: Deactivated successfully. Jul 15 11:54:56.707332 systemd[1]: session-15.scope: Deactivated successfully. Jul 15 11:54:56.708123 systemd-logind[1237]: Session 15 logged out. Waiting for processes to exit. Jul 15 11:54:56.708830 systemd-logind[1237]: Removed session 15. Jul 15 11:54:56.807000 audit[5962]: USER_ACCT pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:56.807000 audit[5962]: CRED_ACQ pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:56.807000 audit[5962]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffc0120310 a2=3 a3=0 items=0 ppid=1 pid=5962 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:54:56.807000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:54:56.827730 sshd[5962]: Accepted publickey for core from 147.75.109.163 port 56986 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:54:56.813210 sshd[5962]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:54:56.847340 systemd[1]: Started session-16.scope. Jul 15 11:54:56.847763 systemd-logind[1237]: New session 16 of user core. Jul 15 11:54:56.850000 audit[5962]: USER_START pid=5962 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:56.856000 audit[5965]: CRED_ACQ pid=5965 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:54:57.261953 kubelet[2102]: E0715 11:54:42.824548 2102 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="17.734s" Jul 15 11:54:59.558000 audit[4991]: AVC avc: denied { watch } for pid=4991 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_46.3179759843/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c442,c842 tclass=file permissive=0 Jul 15 11:54:59.558000 audit[4991]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000f5a000 a2=fc6 a3=0 items=0 ppid=4888 pid=4991 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 key=(null) Jul 15 11:54:59.558000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:55:20.062415 kernel: kauditd_printk_skb: 15 callbacks suppressed Jul 15 11:55:20.174195 kernel: audit: type=1334 audit(1752580520.053:1695): prog-id=247 op=UNLOAD Jul 15 11:55:20.204579 kernel: audit: type=1334 audit(1752580520.057:1696): prog-id=250 op=UNLOAD Jul 15 11:55:20.053000 audit: BPF prog-id=247 op=UNLOAD Jul 15 11:55:20.057000 audit: BPF prog-id=250 op=UNLOAD Jul 15 11:55:20.042860 systemd[1]: cri-containerd-32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821.scope: Deactivated successfully. Jul 15 11:55:20.457578 env[1245]: time="2025-07-15T11:55:20.215205649Z" level=info msg="shim disconnected" id=32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821 Jul 15 11:55:20.457578 env[1245]: time="2025-07-15T11:55:20.215237361Z" level=warning msg="cleaning up after shim disconnected" id=32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821 namespace=k8s.io Jul 15 11:55:20.457578 env[1245]: time="2025-07-15T11:55:20.215245144Z" level=info msg="cleaning up dead shim" Jul 15 11:55:20.457578 env[1245]: time="2025-07-15T11:55:20.259659702Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:55:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5996 runtime=io.containerd.runc.v2\n" Jul 15 11:55:20.055127 systemd[1]: cri-containerd-32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821.scope: Consumed 1.115s CPU time. Jul 15 11:55:20.307490 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821-rootfs.mount: Deactivated successfully. Jul 15 11:55:20.518986 systemd[1]: cri-containerd-287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d.scope: Deactivated successfully. Jul 15 11:55:20.519158 systemd[1]: cri-containerd-287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d.scope: Consumed 3.228s CPU time. Jul 15 11:55:20.558000 audit: BPF prog-id=77 op=UNLOAD Jul 15 11:55:20.565111 kernel: audit: type=1334 audit(1752580520.558:1697): prog-id=77 op=UNLOAD Jul 15 11:55:20.579224 kernel: audit: type=1334 audit(1752580520.558:1698): prog-id=95 op=UNLOAD Jul 15 11:55:20.558000 audit: BPF prog-id=95 op=UNLOAD Jul 15 11:55:20.598472 env[1245]: time="2025-07-15T11:55:20.598428506Z" level=info msg="shim disconnected" id=287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d Jul 15 11:55:20.598643 env[1245]: time="2025-07-15T11:55:20.598630016Z" level=warning msg="cleaning up after shim disconnected" id=287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d namespace=k8s.io Jul 15 11:55:20.601430 env[1245]: time="2025-07-15T11:55:20.598696785Z" level=info msg="cleaning up dead shim" Jul 15 11:55:20.600397 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d-rootfs.mount: Deactivated successfully. Jul 15 11:55:20.608511 env[1245]: time="2025-07-15T11:55:20.608485745Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:55:20Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6023 runtime=io.containerd.runc.v2\n" Jul 15 11:55:21.291107 systemd[1]: cri-containerd-a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce.scope: Deactivated successfully. Jul 15 11:55:21.352304 kernel: audit: type=1334 audit(1752580521.289:1699): prog-id=251 op=UNLOAD Jul 15 11:55:21.356691 kernel: audit: type=1334 audit(1752580521.293:1700): prog-id=254 op=UNLOAD Jul 15 11:55:21.289000 audit: BPF prog-id=251 op=UNLOAD Jul 15 11:55:21.293000 audit: BPF prog-id=254 op=UNLOAD Jul 15 11:55:21.362944 env[1245]: time="2025-07-15T11:55:21.357183834Z" level=info msg="shim disconnected" id=a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce Jul 15 11:55:21.362944 env[1245]: time="2025-07-15T11:55:21.357220225Z" level=warning msg="cleaning up after shim disconnected" id=a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce namespace=k8s.io Jul 15 11:55:21.362944 env[1245]: time="2025-07-15T11:55:21.357229391Z" level=info msg="cleaning up dead shim" Jul 15 11:55:21.362089 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce-rootfs.mount: Deactivated successfully. Jul 15 11:55:21.371294 env[1245]: time="2025-07-15T11:55:21.366296729Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:55:21Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6050 runtime=io.containerd.runc.v2\n" Jul 15 11:55:22.099555 sshd[5962]: pam_unix(sshd:session): session closed for user core Jul 15 11:55:22.169815 kernel: audit: type=1130 audit(1752580522.141:1701): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.107:22-147.75.109.163:57886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:55:22.173639 kernel: audit: type=1106 audit(1752580522.146:1702): pid=5962 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:22.173673 kernel: audit: type=1325 audit(1752580522.154:1703): table=filter:139 family=2 entries=20 op=nft_register_rule pid=6067 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:55:22.173693 kernel: audit: type=1300 audit(1752580522.154:1703): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd190290a0 a2=0 a3=7ffd1902908c items=0 ppid=2205 pid=6067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:22.141000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.107:22-147.75.109.163:57886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:55:22.146000 audit[5962]: USER_END pid=5962 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:22.154000 audit[6067]: NETFILTER_CFG table=filter:139 family=2 entries=20 op=nft_register_rule pid=6067 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:55:22.154000 audit[6067]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd190290a0 a2=0 a3=7ffd1902908c items=0 ppid=2205 pid=6067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:22.154000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:55:22.157000 audit[5962]: CRED_DISP pid=5962 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:22.162000 audit[6067]: NETFILTER_CFG table=nat:140 family=2 entries=26 op=nft_register_rule pid=6067 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:55:22.162000 audit[6067]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffd190290a0 a2=0 a3=0 items=0 ppid=2205 pid=6067 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:22.162000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:55:22.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.107:22-147.75.109.163:56986 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:55:22.142844 systemd[1]: Started sshd@14-139.178.70.107:22-147.75.109.163:57886.service. Jul 15 11:55:22.168400 systemd[1]: sshd@13-139.178.70.107:22-147.75.109.163:56986.service: Deactivated successfully. Jul 15 11:55:22.171003 systemd[1]: session-16.scope: Deactivated successfully. Jul 15 11:55:22.172620 systemd-logind[1237]: Session 16 logged out. Waiting for processes to exit. Jul 15 11:55:22.173919 systemd-logind[1237]: Removed session 16. Jul 15 11:55:22.266000 audit[6068]: USER_ACCT pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:22.266000 audit[6068]: CRED_ACQ pid=6068 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:22.266000 audit[6068]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff504bb0e0 a2=3 a3=0 items=0 ppid=1 pid=6068 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:22.266000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:55:22.273015 sshd[6068]: Accepted publickey for core from 147.75.109.163 port 57886 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:55:22.271325 sshd[6068]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:55:22.297052 systemd[1]: Started session-17.scope. Jul 15 11:55:22.297462 systemd-logind[1237]: New session 17 of user core. Jul 15 11:55:22.299000 audit[6068]: USER_START pid=6068 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:22.300000 audit[6071]: CRED_ACQ pid=6071 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:23.406070 env[1245]: time="2025-07-15T11:55:23.406038969Z" level=info msg="StopPodSandbox for \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\"" Jul 15 11:55:23.548615 kubelet[2102]: W0715 11:55:23.038516 2102 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@12-139.178.70.107:22-147.75.109.163:56972.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@12-139.178.70.107:22-147.75.109.163:56972.service: no such file or directory Jul 15 11:55:23.615418 kubelet[2102]: E0715 11:55:23.359807 2102 kubelet.go:2345] "Skipping pod synchronization" err="container runtime is down" Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.377 [WARNING][6152] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"19fff0c9-96cf-4668-96d3-25fbced73cfb", ResourceVersion:"1421", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 51, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f", Pod:"coredns-7c65d6cfc9-jcf2z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1b20d4e12d4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.388 [INFO][6152] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.388 [INFO][6152] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" iface="eth0" netns="" Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.388 [INFO][6152] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.388 [INFO][6152] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.771 [INFO][6172] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" HandleID="k8s-pod-network.5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.776 [INFO][6172] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.778 [INFO][6172] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.827 [WARNING][6172] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" HandleID="k8s-pod-network.5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.827 [INFO][6172] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" HandleID="k8s-pod-network.5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.829 [INFO][6172] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:55:24.843823 env[1245]: 2025-07-15 11:55:24.835 [INFO][6152] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:55:24.843823 env[1245]: time="2025-07-15T11:55:24.843541678Z" level=info msg="TearDown network for sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\" successfully" Jul 15 11:55:24.843823 env[1245]: time="2025-07-15T11:55:24.843563546Z" level=info msg="StopPodSandbox for \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\" returns successfully" Jul 15 11:55:25.433978 kubelet[2102]: E0715 11:55:25.430159 2102 kubelet.go:2345] "Skipping pod synchronization" err="container runtime is down" Jul 15 11:55:25.648666 kubelet[2102]: W0715 11:55:25.640005 2102 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-15.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-15.scope: no such file or directory Jul 15 11:55:25.650570 kubelet[2102]: W0715 11:55:25.648888 2102 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@13-139.178.70.107:22-147.75.109.163:56986.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@13-139.178.70.107:22-147.75.109.163:56986.service: no such file or directory Jul 15 11:55:25.650570 kubelet[2102]: W0715 11:55:25.648926 2102 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-16.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-16.scope: no such file or directory Jul 15 11:55:25.835180 kubelet[2102]: E0715 11:55:25.511110 2102 controller.go:195] "Failed to update lease" err="context deadline exceeded" Jul 15 11:55:26.430379 env[1245]: time="2025-07-15T11:55:26.430248433Z" level=info msg="RemovePodSandbox for \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\"" Jul 15 11:55:26.430379 env[1245]: time="2025-07-15T11:55:26.430278643Z" level=info msg="Forcibly stopping sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\"" Jul 15 11:55:26.499206 systemd[1]: run-containerd-runc-k8s.io-f8fb2b3f90496de1bda8d513969b4b1a4823ca23f00aeb1648222b72cc3bffd1-runc.9K38yF.mount: Deactivated successfully. Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.331 [WARNING][6243] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0", GenerateName:"coredns-7c65d6cfc9-", Namespace:"kube-system", SelfLink:"", UID:"19fff0c9-96cf-4668-96d3-25fbced73cfb", ResourceVersion:"1421", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 51, 53, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"7c65d6cfc9", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"d7a53a5c3cc6348568fc46b947fbbd7efc2bd3f55fab00d31f3c65f992d8b11f", Pod:"coredns-7c65d6cfc9-jcf2z", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali1b20d4e12d4", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.345 [INFO][6243] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.346 [INFO][6243] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" iface="eth0" netns="" Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.346 [INFO][6243] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.346 [INFO][6243] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.652 [INFO][6255] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" HandleID="k8s-pod-network.5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.656 [INFO][6255] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.658 [INFO][6255] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.716 [WARNING][6255] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" HandleID="k8s-pod-network.5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.716 [INFO][6255] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" HandleID="k8s-pod-network.5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Workload="localhost-k8s-coredns--7c65d6cfc9--jcf2z-eth0" Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.717 [INFO][6255] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:55:27.729545 env[1245]: 2025-07-15 11:55:27.720 [INFO][6243] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117" Jul 15 11:55:27.729545 env[1245]: time="2025-07-15T11:55:27.726268511Z" level=info msg="TearDown network for sandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\" successfully" Jul 15 11:55:27.849700 env[1245]: time="2025-07-15T11:55:27.741995206Z" level=info msg="RemovePodSandbox \"5696c14aa614805b1e7e45343c8b947ad40dc55697231c9bd0281173f6e64117\" returns successfully" Jul 15 11:55:29.033095 env[1245]: time="2025-07-15T11:55:29.033033359Z" level=info msg="StopPodSandbox for \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\"" Jul 15 11:55:29.548666 sshd[6068]: pam_unix(sshd:session): session closed for user core Jul 15 11:55:29.632750 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 15 11:55:29.641957 kernel: audit: type=1130 audit(1752580529.584:1712): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.107:22-147.75.109.163:48100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:55:29.650623 kernel: audit: type=1106 audit(1752580529.605:1713): pid=6068 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:29.650701 kernel: audit: type=1104 audit(1752580529.606:1714): pid=6068 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:29.650732 kernel: audit: type=1131 audit(1752580529.623:1715): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.107:22-147.75.109.163:57886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:55:29.584000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.107:22-147.75.109.163:48100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:55:29.605000 audit[6068]: USER_END pid=6068 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:29.606000 audit[6068]: CRED_DISP pid=6068 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:29.623000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.107:22-147.75.109.163:57886 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:55:29.580070 systemd[1]: Started sshd@15-139.178.70.107:22-147.75.109.163:48100.service. Jul 15 11:55:29.624672 systemd[1]: sshd@14-139.178.70.107:22-147.75.109.163:57886.service: Deactivated successfully. Jul 15 11:55:29.625343 systemd[1]: session-17.scope: Deactivated successfully. Jul 15 11:55:29.625479 systemd[1]: session-17.scope: Consumed 1.368s CPU time. Jul 15 11:55:29.629881 systemd-logind[1237]: Session 17 logged out. Waiting for processes to exit. Jul 15 11:55:29.630456 systemd-logind[1237]: Removed session 17. Jul 15 11:55:29.715000 audit[6285]: USER_ACCT pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:29.720570 sshd[6285]: Accepted publickey for core from 147.75.109.163 port 48100 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:55:29.719000 audit[6285]: CRED_ACQ pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:29.723083 sshd[6285]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:55:29.724130 kernel: audit: type=1101 audit(1752580529.715:1716): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:29.724164 kernel: audit: type=1103 audit(1752580529.719:1717): pid=6285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:29.724181 kernel: audit: type=1006 audit(1752580529.719:1718): pid=6285 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 15 11:55:29.719000 audit[6285]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc97d14e70 a2=3 a3=0 items=0 ppid=1 pid=6285 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:29.748107 kernel: audit: type=1300 audit(1752580529.719:1718): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc97d14e70 a2=3 a3=0 items=0 ppid=1 pid=6285 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:29.748152 kernel: audit: type=1327 audit(1752580529.719:1718): proctitle=737368643A20636F7265205B707269765D Jul 15 11:55:29.719000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:55:29.776024 systemd-logind[1237]: New session 18 of user core. Jul 15 11:55:29.776561 systemd[1]: Started session-18.scope. Jul 15 11:55:29.779000 audit[6285]: USER_START pid=6285 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:29.785477 kernel: audit: type=1105 audit(1752580529.779:1719): pid=6285 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:29.784000 audit[6294]: CRED_ACQ pid=6294 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:29.915255 kubelet[2102]: I0715 11:55:29.903434 2102 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1b0b115b-c4c6-4d3f-942e-84cda13fa272-calico-apiserver-certs\") pod \"1b0b115b-c4c6-4d3f-942e-84cda13fa272\" (UID: \"1b0b115b-c4c6-4d3f-942e-84cda13fa272\") " Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:29.692 [WARNING][6278] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" WorkloadEndpoint="localhost-k8s-whisker--74b678ff6c--bhdg7-eth0" Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:29.701 [INFO][6278] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:29.701 [INFO][6278] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" iface="eth0" netns="" Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:29.701 [INFO][6278] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:29.702 [INFO][6278] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:30.051 [INFO][6289] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" HandleID="k8s-pod-network.d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Workload="localhost-k8s-whisker--74b678ff6c--bhdg7-eth0" Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:30.058 [INFO][6289] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:30.059 [INFO][6289] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:30.084 [WARNING][6289] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" HandleID="k8s-pod-network.d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Workload="localhost-k8s-whisker--74b678ff6c--bhdg7-eth0" Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:30.084 [INFO][6289] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" HandleID="k8s-pod-network.d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Workload="localhost-k8s-whisker--74b678ff6c--bhdg7-eth0" Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:30.085 [INFO][6289] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:55:30.092719 env[1245]: 2025-07-15 11:55:30.089 [INFO][6278] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:55:30.116221 env[1245]: time="2025-07-15T11:55:30.093880841Z" level=info msg="TearDown network for sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\" successfully" Jul 15 11:55:30.116221 env[1245]: time="2025-07-15T11:55:30.093903368Z" level=info msg="StopPodSandbox for \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\" returns successfully" Jul 15 11:55:30.235659 systemd[1]: var-lib-kubelet-pods-1b0b115b\x2dc4c6\x2d4d3f\x2d942e\x2d84cda13fa272-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 15 11:55:30.308290 kubelet[2102]: E0715 11:55:30.042626 2102 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.8s" Jul 15 11:55:30.627144 kubelet[2102]: I0715 11:55:30.386127 2102 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-8lrjv\" (UniqueName: \"kubernetes.io/projected/1b0b115b-c4c6-4d3f-942e-84cda13fa272-kube-api-access-8lrjv\") pod \"1b0b115b-c4c6-4d3f-942e-84cda13fa272\" (UID: \"1b0b115b-c4c6-4d3f-942e-84cda13fa272\") " Jul 15 11:55:30.868937 env[1245]: time="2025-07-15T11:55:30.868648312Z" level=info msg="RemovePodSandbox for \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\"" Jul 15 11:55:30.868937 env[1245]: time="2025-07-15T11:55:30.868677781Z" level=info msg="Forcibly stopping sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\"" Jul 15 11:55:31.122269 systemd[1]: var-lib-kubelet-pods-1b0b115b\x2dc4c6\x2d4d3f\x2d942e\x2d84cda13fa272-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d8lrjv.mount: Deactivated successfully. Jul 15 11:55:31.196282 kubelet[2102]: I0715 11:55:31.042584 2102 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/1b0b115b-c4c6-4d3f-942e-84cda13fa272-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "1b0b115b-c4c6-4d3f-942e-84cda13fa272" (UID: "1b0b115b-c4c6-4d3f-942e-84cda13fa272"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 15 11:55:31.393541 kubelet[2102]: I0715 11:55:31.393334 2102 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/1b0b115b-c4c6-4d3f-942e-84cda13fa272-kube-api-access-8lrjv" (OuterVolumeSpecName: "kube-api-access-8lrjv") pod "1b0b115b-c4c6-4d3f-942e-84cda13fa272" (UID: "1b0b115b-c4c6-4d3f-942e-84cda13fa272"). InnerVolumeSpecName "kube-api-access-8lrjv". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.300 [WARNING][6313] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" WorkloadEndpoint="localhost-k8s-whisker--74b678ff6c--bhdg7-eth0" Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.302 [INFO][6313] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.302 [INFO][6313] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" iface="eth0" netns="" Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.303 [INFO][6313] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.303 [INFO][6313] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.632 [INFO][6322] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" HandleID="k8s-pod-network.d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Workload="localhost-k8s-whisker--74b678ff6c--bhdg7-eth0" Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.640 [INFO][6322] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.640 [INFO][6322] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.661 [WARNING][6322] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" HandleID="k8s-pod-network.d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Workload="localhost-k8s-whisker--74b678ff6c--bhdg7-eth0" Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.661 [INFO][6322] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" HandleID="k8s-pod-network.d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Workload="localhost-k8s-whisker--74b678ff6c--bhdg7-eth0" Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.663 [INFO][6322] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:55:31.666918 env[1245]: 2025-07-15 11:55:31.665 [INFO][6313] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac" Jul 15 11:55:31.666918 env[1245]: time="2025-07-15T11:55:31.666822144Z" level=info msg="TearDown network for sandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\" successfully" Jul 15 11:55:31.712499 env[1245]: time="2025-07-15T11:55:31.712477607Z" level=info msg="RemovePodSandbox \"d763bb40546fd6e85d90809c9c2941132a7865d97c096fb092437ade14e956ac\" returns successfully" Jul 15 11:55:31.885660 env[1245]: time="2025-07-15T11:55:31.885233863Z" level=info msg="StopPodSandbox for \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\"" Jul 15 11:55:31.889823 kubelet[2102]: I0715 11:55:31.889800 2102 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-8lrjv\" (UniqueName: \"kubernetes.io/projected/1b0b115b-c4c6-4d3f-942e-84cda13fa272-kube-api-access-8lrjv\") on node \"localhost\" DevicePath \"\"" Jul 15 11:55:31.891040 kubelet[2102]: I0715 11:55:31.889833 2102 reconciler_common.go:293] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/1b0b115b-c4c6-4d3f-942e-84cda13fa272-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.042 [WARNING][6336] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0", GenerateName:"calico-kube-controllers-6cdcfb8994-", Namespace:"calico-system", SelfLink:"", UID:"120c9d9a-979f-4c42-8753-ad82a94c699a", ResourceVersion:"1513", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6cdcfb8994", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873", Pod:"calico-kube-controllers-6cdcfb8994-hqlqp", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9dba86c2343", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.046 [INFO][6336] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.046 [INFO][6336] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" iface="eth0" netns="" Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.046 [INFO][6336] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.046 [INFO][6336] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.281 [INFO][6343] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" HandleID="k8s-pod-network.9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.292 [INFO][6343] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.292 [INFO][6343] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.327 [WARNING][6343] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" HandleID="k8s-pod-network.9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.328 [INFO][6343] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" HandleID="k8s-pod-network.9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.328 [INFO][6343] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:55:32.332494 env[1245]: 2025-07-15 11:55:32.331 [INFO][6336] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:55:32.332494 env[1245]: time="2025-07-15T11:55:32.332403498Z" level=info msg="TearDown network for sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\" successfully" Jul 15 11:55:32.332494 env[1245]: time="2025-07-15T11:55:32.332424498Z" level=info msg="StopPodSandbox for \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\" returns successfully" Jul 15 11:55:32.597100 env[1245]: time="2025-07-15T11:55:32.597027807Z" level=info msg="RemovePodSandbox for \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\"" Jul 15 11:55:32.597100 env[1245]: time="2025-07-15T11:55:32.597055021Z" level=info msg="Forcibly stopping sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\"" Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.792 [WARNING][6357] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0", GenerateName:"calico-kube-controllers-6cdcfb8994-", Namespace:"calico-system", SelfLink:"", UID:"120c9d9a-979f-4c42-8753-ad82a94c699a", ResourceVersion:"1513", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 52, 3, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"6cdcfb8994", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"2ef0a91d8c56f92ccc42926b71a37b3baa784f76e4ec281902f2c275d300c873", Pod:"calico-kube-controllers-6cdcfb8994-hqlqp", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali9dba86c2343", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.801 [INFO][6357] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.801 [INFO][6357] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" iface="eth0" netns="" Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.801 [INFO][6357] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.801 [INFO][6357] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.968 [INFO][6364] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" HandleID="k8s-pod-network.9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.972 [INFO][6364] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.973 [INFO][6364] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.985 [WARNING][6364] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" HandleID="k8s-pod-network.9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.985 [INFO][6364] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" HandleID="k8s-pod-network.9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Workload="localhost-k8s-calico--kube--controllers--6cdcfb8994--hqlqp-eth0" Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.989 [INFO][6364] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:55:32.993914 env[1245]: 2025-07-15 11:55:32.992 [INFO][6357] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68" Jul 15 11:55:33.024817 env[1245]: time="2025-07-15T11:55:32.993937479Z" level=info msg="TearDown network for sandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\" successfully" Jul 15 11:55:33.027090 env[1245]: time="2025-07-15T11:55:33.027064043Z" level=info msg="RemovePodSandbox \"9aa03479b758940946c5724cbb6c44dc31b4c2d51dfbde2d0134fc4a3f709b68\" returns successfully" Jul 15 11:55:33.729390 kubelet[2102]: E0715 11:55:33.469402 2102 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.291s" Jul 15 11:55:33.792780 systemd[1]: Removed slice kubepods-besteffort-pod1b0b115b_c4c6_4d3f_942e_84cda13fa272.slice. Jul 15 11:55:34.362521 sshd[6285]: pam_unix(sshd:session): session closed for user core Jul 15 11:55:34.407000 audit[6285]: USER_END pid=6285 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:34.407000 audit[6285]: CRED_DISP pid=6285 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:34.431000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.107:22-147.75.109.163:48100 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:55:34.431686 systemd[1]: sshd@15-139.178.70.107:22-147.75.109.163:48100.service: Deactivated successfully. Jul 15 11:55:34.437012 systemd[1]: session-18.scope: Deactivated successfully. Jul 15 11:55:34.439206 systemd-logind[1237]: Session 18 logged out. Waiting for processes to exit. Jul 15 11:55:34.455884 systemd-logind[1237]: Removed session 18. Jul 15 11:55:34.680047 kubelet[2102]: I0715 11:55:34.679961 2102 scope.go:117] "RemoveContainer" containerID="0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668" Jul 15 11:55:34.761119 kubelet[2102]: I0715 11:55:34.761098 2102 scope.go:117] "RemoveContainer" containerID="32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821" Jul 15 11:55:34.812704 kubelet[2102]: I0715 11:55:34.802490 2102 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-n9wvp" podStartSLOduration=124.60381462 podStartE2EDuration="3m31.802470873s" podCreationTimestamp="2025-07-15 11:52:03 +0000 UTC" firstStartedPulling="2025-07-15 11:52:30.182592564 +0000 UTC m=+39.515838564" lastFinishedPulling="2025-07-15 11:53:57.381248813 +0000 UTC m=+126.714494817" observedRunningTime="2025-07-15 11:55:34.802086082 +0000 UTC m=+224.135332089" watchObservedRunningTime="2025-07-15 11:55:34.802470873 +0000 UTC m=+224.135716886" Jul 15 11:55:34.851931 env[1245]: time="2025-07-15T11:55:34.851336665Z" level=info msg="CreateContainer within sandbox \"ba2e4c8056de224260be7c24147a56744d85378334c91e8ce79f9c17428fe4d6\" for container &ContainerMetadata{Name:tigera-operator,Attempt:2,}" Jul 15 11:55:34.869322 env[1245]: time="2025-07-15T11:55:34.855827633Z" level=info msg="RemoveContainer for \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\"" Jul 15 11:55:34.869322 env[1245]: time="2025-07-15T11:55:34.868229978Z" level=info msg="RemoveContainer for \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\" returns successfully" Jul 15 11:55:34.869322 env[1245]: time="2025-07-15T11:55:34.868600869Z" level=error msg="ContainerStatus for \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\": not found" Jul 15 11:55:34.872999 kubelet[2102]: I0715 11:55:34.868416 2102 scope.go:117] "RemoveContainer" containerID="0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668" Jul 15 11:55:34.872999 kubelet[2102]: E0715 11:55:34.868732 2102 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\": not found" containerID="0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668" Jul 15 11:55:34.879087 kubelet[2102]: I0715 11:55:34.877945 2102 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668"} err="failed to get container status \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\": rpc error: code = NotFound desc = an error occurred when try to find container \"0ccc67c79e051af6f904486cd9aac91f7723f163cbfc8c2da6ed9b8b5491c668\": not found" Jul 15 11:55:34.893305 env[1245]: time="2025-07-15T11:55:34.893280241Z" level=info msg="CreateContainer within sandbox \"ba2e4c8056de224260be7c24147a56744d85378334c91e8ce79f9c17428fe4d6\" for &ContainerMetadata{Name:tigera-operator,Attempt:2,} returns container id \"e6f726d791508aa217196978540db3d186cfc4eafffe0fcfa295c4f0069bf1b8\"" Jul 15 11:55:34.898298 env[1245]: time="2025-07-15T11:55:34.896156479Z" level=info msg="StartContainer for \"e6f726d791508aa217196978540db3d186cfc4eafffe0fcfa295c4f0069bf1b8\"" Jul 15 11:55:34.939061 systemd[1]: Started cri-containerd-e6f726d791508aa217196978540db3d186cfc4eafffe0fcfa295c4f0069bf1b8.scope. Jul 15 11:55:34.967032 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 15 11:55:34.985645 kernel: audit: type=1400 audit(1752580534.957:1724): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.985687 kernel: audit: type=1400 audit(1752580534.957:1725): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.985705 kernel: audit: type=1400 audit(1752580534.957:1726): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.985721 kernel: audit: type=1400 audit(1752580534.957:1727): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.987920 kernel: audit: type=1400 audit(1752580534.957:1728): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.987951 kernel: audit: type=1400 audit(1752580534.957:1729): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.987979 kernel: audit: type=1400 audit(1752580534.957:1730): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.988002 kernel: audit: type=1400 audit(1752580534.957:1731): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.988020 kernel: audit: type=1400 audit(1752580534.957:1732): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.988037 kernel: audit: type=1400 audit(1752580534.957:1733): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.957000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.957000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.957000 audit: BPF prog-id=255 op=LOAD Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2228 pid=6381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:34.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663732366437393135303861613231373139363937383534306462 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=2228 pid=6381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:34.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663732366437393135303861613231373139363937383534306462 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit: BPF prog-id=256 op=LOAD Jul 15 11:55:34.966000 audit[6381]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00034a0d0 items=0 ppid=2228 pid=6381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:34.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663732366437393135303861613231373139363937383534306462 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit: BPF prog-id=257 op=LOAD Jul 15 11:55:34.966000 audit[6381]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00034a118 items=0 ppid=2228 pid=6381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:34.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663732366437393135303861613231373139363937383534306462 Jul 15 11:55:34.966000 audit: BPF prog-id=257 op=UNLOAD Jul 15 11:55:34.966000 audit: BPF prog-id=256 op=UNLOAD Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { perfmon } for pid=6381 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit[6381]: AVC avc: denied { bpf } for pid=6381 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:34.966000 audit: BPF prog-id=258 op=LOAD Jul 15 11:55:34.966000 audit[6381]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00034a528 items=0 ppid=2228 pid=6381 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:34.966000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536663732366437393135303861613231373139363937383534306462 Jul 15 11:55:35.039507 env[1245]: time="2025-07-15T11:55:34.996026878Z" level=info msg="StartContainer for \"e6f726d791508aa217196978540db3d186cfc4eafffe0fcfa295c4f0069bf1b8\" returns successfully" Jul 15 11:55:35.999862 kubelet[2102]: I0715 11:55:35.999840 2102 scope.go:117] "RemoveContainer" containerID="6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77" Jul 15 11:55:36.081825 kubelet[2102]: I0715 11:55:36.007121 2102 scope.go:117] "RemoveContainer" containerID="287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d" Jul 15 11:55:36.083572 env[1245]: time="2025-07-15T11:55:36.049388825Z" level=info msg="RemoveContainer for \"6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77\"" Jul 15 11:55:36.083572 env[1245]: time="2025-07-15T11:55:36.067529199Z" level=info msg="RemoveContainer for \"6b759f9d83c14b3fcd0986ed6ad86c637f979b9e11590e411681862884ab9a77\" returns successfully" Jul 15 11:55:36.235184 env[1245]: time="2025-07-15T11:55:36.235113163Z" level=info msg="CreateContainer within sandbox \"7ab4dc1fc97bdd4f9c7dcb867602652a61bd2bd1bd22a7ea44b338ecccec169f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Jul 15 11:55:36.268022 env[1245]: time="2025-07-15T11:55:36.267918247Z" level=info msg="CreateContainer within sandbox \"7ab4dc1fc97bdd4f9c7dcb867602652a61bd2bd1bd22a7ea44b338ecccec169f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"89711494b78666132c4e77c8dba78bdb83b81fd44027066db6fa6079092c09e4\"" Jul 15 11:55:36.280862 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2802583656.mount: Deactivated successfully. Jul 15 11:55:36.309309 env[1245]: time="2025-07-15T11:55:36.281522943Z" level=info msg="StartContainer for \"89711494b78666132c4e77c8dba78bdb83b81fd44027066db6fa6079092c09e4\"" Jul 15 11:55:36.309403 kubelet[2102]: I0715 11:55:36.296035 2102 scope.go:117] "RemoveContainer" containerID="41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c" Jul 15 11:55:36.309403 kubelet[2102]: I0715 11:55:36.297748 2102 scope.go:117] "RemoveContainer" containerID="a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce" Jul 15 11:55:36.327255 env[1245]: time="2025-07-15T11:55:36.327228682Z" level=info msg="RemoveContainer for \"41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c\"" Jul 15 11:55:36.327395 env[1245]: time="2025-07-15T11:55:36.327378879Z" level=info msg="CreateContainer within sandbox \"0484e9e7eeeb3a1380931355efbe852caad27ef8b625add30e5e966d4487b41d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:2,}" Jul 15 11:55:36.336576 env[1245]: time="2025-07-15T11:55:36.336551080Z" level=info msg="RemoveContainer for \"41facb8980e108d96a2f5cc87db45000a6130b44683e79ae94ade47726b6692c\" returns successfully" Jul 15 11:55:36.352151 env[1245]: time="2025-07-15T11:55:36.350789909Z" level=info msg="CreateContainer within sandbox \"0484e9e7eeeb3a1380931355efbe852caad27ef8b625add30e5e966d4487b41d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:2,} returns container id \"ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8\"" Jul 15 11:55:36.352151 env[1245]: time="2025-07-15T11:55:36.351228225Z" level=info msg="StartContainer for \"ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8\"" Jul 15 11:55:36.354967 systemd[1]: Started cri-containerd-89711494b78666132c4e77c8dba78bdb83b81fd44027066db6fa6079092c09e4.scope. Jul 15 11:55:36.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.374000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.374000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.374000 audit: BPF prog-id=259 op=LOAD Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit[6417]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1812 pid=6417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:36.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839373131343934623738363636313332633465373763386462613738 Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit[6417]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=1812 pid=6417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:36.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839373131343934623738363636313332633465373763386462613738 Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.386000 audit: BPF prog-id=260 op=LOAD Jul 15 11:55:36.386000 audit[6417]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000358ad0 items=0 ppid=1812 pid=6417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:36.386000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839373131343934623738363636313332633465373763386462613738 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit: BPF prog-id=261 op=LOAD Jul 15 11:55:36.387000 audit[6417]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000358b18 items=0 ppid=1812 pid=6417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:36.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839373131343934623738363636313332633465373763386462613738 Jul 15 11:55:36.387000 audit: BPF prog-id=261 op=UNLOAD Jul 15 11:55:36.387000 audit: BPF prog-id=260 op=UNLOAD Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { perfmon } for pid=6417 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit[6417]: AVC avc: denied { bpf } for pid=6417 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.387000 audit: BPF prog-id=262 op=LOAD Jul 15 11:55:36.387000 audit[6417]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000358f28 items=0 ppid=1812 pid=6417 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:36.387000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3839373131343934623738363636313332633465373763386462613738 Jul 15 11:55:36.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit: BPF prog-id=263 op=LOAD Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1839 pid=6441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:36.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562643163303732643737366635386236613864653131353463303130 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1839 pid=6441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:36.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562643163303732643737366635386236613864653131353463303130 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit: BPF prog-id=264 op=LOAD Jul 15 11:55:36.396000 audit[6441]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000a2a50 items=0 ppid=1839 pid=6441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:36.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562643163303732643737366635386236613864653131353463303130 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit: BPF prog-id=265 op=LOAD Jul 15 11:55:36.396000 audit[6441]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000a2a98 items=0 ppid=1839 pid=6441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:36.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562643163303732643737366635386236613864653131353463303130 Jul 15 11:55:36.396000 audit: BPF prog-id=265 op=UNLOAD Jul 15 11:55:36.396000 audit: BPF prog-id=264 op=UNLOAD Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { perfmon } for pid=6441 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit[6441]: AVC avc: denied { bpf } for pid=6441 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:55:36.396000 audit: BPF prog-id=266 op=LOAD Jul 15 11:55:36.396000 audit[6441]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000a2ea8 items=0 ppid=1839 pid=6441 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:36.396000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6562643163303732643737366635386236613864653131353463303130 Jul 15 11:55:36.380583 systemd[1]: Started cri-containerd-ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8.scope. Jul 15 11:55:36.482102 env[1245]: time="2025-07-15T11:55:36.421833996Z" level=info msg="StartContainer for \"89711494b78666132c4e77c8dba78bdb83b81fd44027066db6fa6079092c09e4\" returns successfully" Jul 15 11:55:36.482102 env[1245]: time="2025-07-15T11:55:36.436059296Z" level=info msg="StartContainer for \"ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8\" returns successfully" Jul 15 11:55:37.047145 kubelet[2102]: I0715 11:55:37.038080 2102 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="1b0b115b-c4c6-4d3f-942e-84cda13fa272" path="/var/lib/kubelet/pods/1b0b115b-c4c6-4d3f-942e-84cda13fa272/volumes" Jul 15 11:55:37.303633 systemd[1]: run-containerd-runc-k8s.io-89711494b78666132c4e77c8dba78bdb83b81fd44027066db6fa6079092c09e4-runc.EUJ4lQ.mount: Deactivated successfully. Jul 15 11:55:38.683000 audit[6433]: AVC avc: denied { watch } for pid=6433 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:38.683000 audit[6433]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0000ffa20 a2=fc6 a3=0 items=0 ppid=1812 pid=6433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:38.683000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:38.701000 audit[6433]: AVC avc: denied { watch } for pid=6433 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:38.701000 audit[6433]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0006cdef0 a2=fc6 a3=0 items=0 ppid=1812 pid=6433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:38.701000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:39.444544 systemd[1]: Started sshd@16-139.178.70.107:22-147.75.109.163:48990.service. Jul 15 11:55:39.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.107:22-147.75.109.163:48990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:55:39.878000 audit[6483]: USER_ACCT pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:39.911000 audit[6483]: CRED_ACQ pid=6483 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:39.911000 audit[6483]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee5cbb440 a2=3 a3=0 items=0 ppid=1 pid=6483 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:55:39.911000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:55:39.929569 sshd[6483]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:55:40.091899 sshd[6483]: Accepted publickey for core from 147.75.109.163 port 48990 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:55:40.111321 systemd-logind[1237]: New session 19 of user core. Jul 15 11:55:40.126020 systemd[1]: Started session-19.scope. Jul 15 11:55:40.154930 kernel: kauditd_printk_skb: 173 callbacks suppressed Jul 15 11:55:40.167018 kernel: audit: type=1105 audit(1752580540.147:1784): pid=6483 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:40.147000 audit[6483]: USER_START pid=6483 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:40.176000 audit[6500]: CRED_ACQ pid=6500 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:40.182465 kernel: audit: type=1103 audit(1752580540.176:1785): pid=6500 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:55:44.393000 audit[4731]: AVC avc: denied { watch } for pid=4731 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1972882796/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c898 tclass=file permissive=0 Jul 15 11:55:44.556874 kernel: audit: type=1400 audit(1752580544.393:1786): avc: denied { watch } for pid=4731 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1972882796/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c898 tclass=file permissive=0 Jul 15 11:55:44.569742 kernel: audit: type=1300 audit(1752580544.393:1786): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002032a60 a2=fc6 a3=0 items=0 ppid=3956 pid=4731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 key=(null) Jul 15 11:55:44.571619 kernel: audit: type=1327 audit(1752580544.393:1786): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:55:44.393000 audit[4731]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002032a60 a2=fc6 a3=0 items=0 ppid=3956 pid=4731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 key=(null) Jul 15 11:55:44.393000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:55:45.363000 audit[4816]: AVC avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1645455470/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c446 tclass=file permissive=0 Jul 15 11:55:45.484316 kernel: audit: type=1400 audit(1752580545.363:1787): avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1645455470/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c446 tclass=file permissive=0 Jul 15 11:55:45.491262 kernel: audit: type=1300 audit(1752580545.363:1787): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002458540 a2=fc6 a3=0 items=0 ppid=4058 pid=4816 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 key=(null) Jul 15 11:55:45.491293 kernel: audit: type=1327 audit(1752580545.363:1787): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:55:45.363000 audit[4816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002458540 a2=fc6 a3=0 items=0 ppid=4058 pid=4816 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 key=(null) Jul 15 11:55:45.363000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:55:45.866116 kernel: audit: type=1400 audit(1752580545.847:1788): avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:45.871568 kernel: audit: type=1300 audit(1752580545.847:1788): arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c01056c660 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:55:45.874082 kernel: audit: type=1327 audit(1752580545.847:1788): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:55:45.874113 kernel: audit: type=1400 audit(1752580545.847:1789): avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:45.878346 kernel: audit: type=1300 audit(1752580545.847:1789): arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00fb5f320 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:55:45.888220 kernel: audit: type=1327 audit(1752580545.847:1789): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:55:45.847000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:45.847000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c01056c660 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:55:45.847000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:55:45.847000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:45.847000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=78 a1=c00fb5f320 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:55:45.847000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:55:45.933000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:45.945286 kernel: audit: type=1400 audit(1752580545.933:1790): avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:45.933000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c01056c6f0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:55:45.933000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:55:45.998000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:45.998000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c010853a10 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:55:45.998000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:55:46.019000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:46.019000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c00f85de80 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:55:46.019000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:55:46.019000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:46.019000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=77 a1=c010853bc0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:55:46.019000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:55:57.728000 audit[6433]: AVC avc: denied { watch } for pid=6433 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:57.922970 kernel: kauditd_printk_skb: 11 callbacks suppressed Jul 15 11:55:57.929243 kernel: audit: type=1400 audit(1752580557.728:1794): avc: denied { watch } for pid=6433 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:57.932528 kernel: audit: type=1400 audit(1752580557.728:1795): avc: denied { watch } for pid=6433 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:57.932578 kernel: audit: type=1300 audit(1752580557.728:1795): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c16e80 a2=fc6 a3=0 items=0 ppid=1812 pid=6433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:57.934582 kernel: audit: type=1327 audit(1752580557.728:1795): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:57.934619 kernel: audit: type=1300 audit(1752580557.728:1794): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d96920 a2=fc6 a3=0 items=0 ppid=1812 pid=6433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:57.938136 kernel: audit: type=1327 audit(1752580557.728:1794): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:57.938172 kernel: audit: type=1400 audit(1752580557.732:1796): avc: denied { watch } for pid=6433 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:57.938197 kernel: audit: type=1300 audit(1752580557.732:1796): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d96980 a2=fc6 a3=0 items=0 ppid=1812 pid=6433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:57.938219 kernel: audit: type=1327 audit(1752580557.732:1796): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:57.938240 kernel: audit: type=1400 audit(1752580557.732:1797): avc: denied { watch } for pid=6433 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:57.728000 audit[6433]: AVC avc: denied { watch } for pid=6433 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:57.728000 audit[6433]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000c16e80 a2=fc6 a3=0 items=0 ppid=1812 pid=6433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:57.728000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:57.728000 audit[6433]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d96920 a2=fc6 a3=0 items=0 ppid=1812 pid=6433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:57.728000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:57.732000 audit[6433]: AVC avc: denied { watch } for pid=6433 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:57.732000 audit[6433]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d96980 a2=fc6 a3=0 items=0 ppid=1812 pid=6433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:57.732000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:57.732000 audit[6433]: AVC avc: denied { watch } for pid=6433 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:55:57.732000 audit[6433]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000d969e0 a2=fc6 a3=0 items=0 ppid=1812 pid=6433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:57.732000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:57.781000 audit[6433]: AVC avc: denied { watch } for pid=6433 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:55:57.781000 audit[6433]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000de8c00 a2=fc6 a3=0 items=0 ppid=1812 pid=6433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:57.781000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:57.786000 audit[6433]: AVC avc: denied { watch } for pid=6433 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:55:57.786000 audit[6433]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001447540 a2=fc6 a3=0 items=0 ppid=1812 pid=6433 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:57.786000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:59.417000 audit[6514]: AVC avc: denied { execute } for pid=6514 comm="kube-controller" name="uds" dev="sda9" ino=8425 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 15 11:55:59.417000 audit[6514]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c000c3cc30 a1=c002086d50 a2=c0020c1200 a3=0 items=0 ppid=6433 pid=6514 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:55:59.417000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:55:59.672000 audit[4991]: AVC avc: denied { watch } for pid=4991 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_46.3179759843/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c442,c842 tclass=file permissive=0 Jul 15 11:55:59.672000 audit[4991]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002a36640 a2=fc6 a3=0 items=0 ppid=4888 pid=4991 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 key=(null) Jul 15 11:55:59.672000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:56:00.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.107:22-185.156.73.235:64001 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:56:00.177429 systemd[1]: Started sshd@17-139.178.70.107:22-185.156.73.235:64001.service. Jul 15 11:56:01.026478 sshd[6516]: kex_exchange_identification: Connection closed by remote host Jul 15 11:56:01.026478 sshd[6516]: Connection closed by 185.156.73.235 port 64001 Jul 15 11:56:01.105000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.107:22-185.156.73.235:64001 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:56:01.084333 systemd[1]: sshd@17-139.178.70.107:22-185.156.73.235:64001.service: Deactivated successfully. Jul 15 11:56:15.546000 audit[6523]: NETFILTER_CFG table=filter:141 family=2 entries=32 op=nft_register_rule pid=6523 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:56:16.002470 kernel: kauditd_printk_skb: 16 callbacks suppressed Jul 15 11:56:16.140019 kernel: audit: type=1325 audit(1752580575.546:1804): table=filter:141 family=2 entries=32 op=nft_register_rule pid=6523 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:56:16.151578 kernel: audit: type=1300 audit(1752580575.546:1804): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffc3aa385b0 a2=0 a3=7ffc3aa3859c items=0 ppid=2205 pid=6523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:16.156065 kernel: audit: type=1327 audit(1752580575.546:1804): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:56:16.159484 kernel: audit: type=1325 audit(1752580575.572:1805): table=nat:142 family=2 entries=26 op=nft_register_rule pid=6523 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:56:16.162578 kernel: audit: type=1300 audit(1752580575.572:1805): arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffc3aa385b0 a2=0 a3=0 items=0 ppid=2205 pid=6523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:16.162642 kernel: audit: type=1327 audit(1752580575.572:1805): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:56:15.546000 audit[6523]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffc3aa385b0 a2=0 a3=7ffc3aa3859c items=0 ppid=2205 pid=6523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:15.546000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:56:15.572000 audit[6523]: NETFILTER_CFG table=nat:142 family=2 entries=26 op=nft_register_rule pid=6523 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:56:15.572000 audit[6523]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffc3aa385b0 a2=0 a3=0 items=0 ppid=2205 pid=6523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:15.572000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:56:16.443751 systemd[1]: cri-containerd-89711494b78666132c4e77c8dba78bdb83b81fd44027066db6fa6079092c09e4.scope: Deactivated successfully. Jul 15 11:56:16.534226 kernel: audit: type=1334 audit(1752580576.451:1806): prog-id=259 op=UNLOAD Jul 15 11:56:16.546030 kernel: audit: type=1334 audit(1752580576.458:1807): prog-id=262 op=UNLOAD Jul 15 11:56:16.451000 audit: BPF prog-id=259 op=UNLOAD Jul 15 11:56:16.458000 audit: BPF prog-id=262 op=UNLOAD Jul 15 11:56:16.452508 systemd[1]: cri-containerd-89711494b78666132c4e77c8dba78bdb83b81fd44027066db6fa6079092c09e4.scope: Consumed 1.106s CPU time. Jul 15 11:56:16.572853 env[1245]: time="2025-07-15T11:56:16.546323154Z" level=info msg="shim disconnected" id=89711494b78666132c4e77c8dba78bdb83b81fd44027066db6fa6079092c09e4 Jul 15 11:56:16.572853 env[1245]: time="2025-07-15T11:56:16.546357323Z" level=warning msg="cleaning up after shim disconnected" id=89711494b78666132c4e77c8dba78bdb83b81fd44027066db6fa6079092c09e4 namespace=k8s.io Jul 15 11:56:16.572853 env[1245]: time="2025-07-15T11:56:16.546365755Z" level=info msg="cleaning up dead shim" Jul 15 11:56:16.572853 env[1245]: time="2025-07-15T11:56:16.552484317Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:56:16Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6536 runtime=io.containerd.runc.v2\n" Jul 15 11:56:16.579756 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-89711494b78666132c4e77c8dba78bdb83b81fd44027066db6fa6079092c09e4-rootfs.mount: Deactivated successfully. Jul 15 11:56:17.049199 systemd[1]: cri-containerd-ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8.scope: Deactivated successfully. Jul 15 11:56:17.185151 kernel: audit: type=1334 audit(1752580577.053:1808): prog-id=263 op=UNLOAD Jul 15 11:56:17.187665 kernel: audit: type=1334 audit(1752580577.056:1809): prog-id=266 op=UNLOAD Jul 15 11:56:17.053000 audit: BPF prog-id=263 op=UNLOAD Jul 15 11:56:17.056000 audit: BPF prog-id=266 op=UNLOAD Jul 15 11:56:17.206020 env[1245]: time="2025-07-15T11:56:17.119117822Z" level=info msg="shim disconnected" id=ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8 Jul 15 11:56:17.206020 env[1245]: time="2025-07-15T11:56:17.119151451Z" level=warning msg="cleaning up after shim disconnected" id=ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8 namespace=k8s.io Jul 15 11:56:17.206020 env[1245]: time="2025-07-15T11:56:17.119158740Z" level=info msg="cleaning up dead shim" Jul 15 11:56:17.206020 env[1245]: time="2025-07-15T11:56:17.129908669Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:56:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6559 runtime=io.containerd.runc.v2\n" Jul 15 11:56:17.139709 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8-rootfs.mount: Deactivated successfully. Jul 15 11:56:18.414339 sshd[6483]: pam_unix(sshd:session): session closed for user core Jul 15 11:56:18.471000 audit[6483]: USER_END pid=6483 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:18.475000 audit[6483]: CRED_DISP pid=6483 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:18.501000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.107:22-147.75.109.163:48990 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:56:18.492707 systemd[1]: sshd@16-139.178.70.107:22-147.75.109.163:48990.service: Deactivated successfully. Jul 15 11:56:18.509482 systemd[1]: session-19.scope: Deactivated successfully. Jul 15 11:56:18.509598 systemd[1]: session-19.scope: Consumed 12.804s CPU time. Jul 15 11:56:18.516746 systemd-logind[1237]: Session 19 logged out. Waiting for processes to exit. Jul 15 11:56:18.535342 systemd-logind[1237]: Removed session 19. Jul 15 11:56:19.078241 kubelet[2102]: W0715 11:56:19.078202 2102 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@17-139.178.70.107:22-185.156.73.235:64001.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@17-139.178.70.107:22-185.156.73.235:64001.service: no such file or directory Jul 15 11:56:19.315728 systemd[1]: run-containerd-runc-k8s.io-f8fb2b3f90496de1bda8d513969b4b1a4823ca23f00aeb1648222b72cc3bffd1-runc.2ZH6eP.mount: Deactivated successfully. Jul 15 11:56:20.334042 systemd[1]: run-containerd-runc-k8s.io-9a2e30c26537cb22929ed2a1706326694ea416cd4dcebafc3274ae8ebb19c692-runc.6Xb3wF.mount: Deactivated successfully. Jul 15 11:56:23.435967 kernel: kauditd_printk_skb: 3 callbacks suppressed Jul 15 11:56:23.517150 kernel: audit: type=1130 audit(1752580583.430:1813): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.107:22-147.75.109.163:46472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:56:23.430000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.107:22-147.75.109.163:46472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:56:23.429728 systemd[1]: Started sshd@18-139.178.70.107:22-147.75.109.163:46472.service. Jul 15 11:56:24.075384 sshd[6743]: Accepted publickey for core from 147.75.109.163 port 46472 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:56:24.187541 kernel: audit: type=1101 audit(1752580584.073:1814): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:24.198960 kernel: audit: type=1103 audit(1752580584.128:1815): pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:24.203379 kernel: audit: type=1006 audit(1752580584.128:1816): pid=6743 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=20 res=1 Jul 15 11:56:24.203410 kernel: audit: type=1300 audit(1752580584.128:1816): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc575e28d0 a2=3 a3=0 items=0 ppid=1 pid=6743 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:24.203428 kernel: audit: type=1327 audit(1752580584.128:1816): proctitle=737368643A20636F7265205B707269765D Jul 15 11:56:24.073000 audit[6743]: USER_ACCT pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:24.128000 audit[6743]: CRED_ACQ pid=6743 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:24.128000 audit[6743]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc575e28d0 a2=3 a3=0 items=0 ppid=1 pid=6743 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:24.128000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:56:24.145476 sshd[6743]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:56:24.374366 systemd-logind[1237]: New session 20 of user core. Jul 15 11:56:24.389593 systemd[1]: Started session-20.scope. Jul 15 11:56:24.434874 kernel: audit: type=1105 audit(1752580584.421:1817): pid=6743 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:24.421000 audit[6743]: USER_START pid=6743 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:24.464000 audit[6747]: CRED_ACQ pid=6747 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:24.469896 kernel: audit: type=1103 audit(1752580584.464:1818): pid=6747 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:30.663393 kubelet[2102]: E0715 11:56:30.653703 2102 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="11.23s" Jul 15 11:56:31.649842 sshd[6743]: pam_unix(sshd:session): session closed for user core Jul 15 11:56:31.712000 audit[6743]: USER_END pid=6743 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:31.747500 kernel: audit: type=1106 audit(1752580591.712:1819): pid=6743 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:31.763328 kernel: audit: type=1104 audit(1752580591.716:1820): pid=6743 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:31.767373 kernel: audit: type=1131 audit(1752580591.736:1821): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.107:22-147.75.109.163:46472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:56:31.716000 audit[6743]: CRED_DISP pid=6743 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:31.736000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.107:22-147.75.109.163:46472 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:56:31.729378 systemd[1]: sshd@18-139.178.70.107:22-147.75.109.163:46472.service: Deactivated successfully. Jul 15 11:56:31.748866 systemd[1]: session-20.scope: Deactivated successfully. Jul 15 11:56:31.748990 systemd[1]: session-20.scope: Consumed 1.434s CPU time. Jul 15 11:56:31.752611 systemd-logind[1237]: Session 20 logged out. Waiting for processes to exit. Jul 15 11:56:31.766470 systemd-logind[1237]: Removed session 20. Jul 15 11:56:32.197796 kubelet[2102]: I0715 11:56:32.196453 2102 scope.go:117] "RemoveContainer" containerID="ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8" Jul 15 11:56:32.258769 kubelet[2102]: I0715 11:56:32.258746 2102 scope.go:117] "RemoveContainer" containerID="287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d" Jul 15 11:56:32.388070 kubelet[2102]: I0715 11:56:32.388041 2102 scope.go:117] "RemoveContainer" containerID="89711494b78666132c4e77c8dba78bdb83b81fd44027066db6fa6079092c09e4" Jul 15 11:56:32.396653 kubelet[2102]: E0715 11:56:32.396435 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"kube-scheduler\" with CrashLoopBackOff: \"back-off 20s restarting failed container=kube-scheduler pod=kube-scheduler-localhost_kube-system(b35b56493416c25588cb530e37ffc065)\"" pod="kube-system/kube-scheduler-localhost" podUID="b35b56493416c25588cb530e37ffc065" Jul 15 11:56:32.461046 env[1245]: time="2025-07-15T11:56:32.460883712Z" level=info msg="RemoveContainer for \"287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d\"" Jul 15 11:56:32.476448 env[1245]: time="2025-07-15T11:56:32.476386582Z" level=info msg="RemoveContainer for \"287f25855b564cb10bbb77e5aa61fdff6a6aa891978308036d6c84bc18fbe66d\" returns successfully" Jul 15 11:56:32.479137 kubelet[2102]: I0715 11:56:32.479121 2102 scope.go:117] "RemoveContainer" containerID="a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce" Jul 15 11:56:32.538159 env[1245]: time="2025-07-15T11:56:32.538071830Z" level=info msg="CreateContainer within sandbox \"7ab4dc1fc97bdd4f9c7dcb867602652a61bd2bd1bd22a7ea44b338ecccec169f\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:2,}" Jul 15 11:56:32.538927 env[1245]: time="2025-07-15T11:56:32.538834343Z" level=info msg="RemoveContainer for \"a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce\"" Jul 15 11:56:32.548591 env[1245]: time="2025-07-15T11:56:32.548488691Z" level=info msg="RemoveContainer for \"a602e2f5dcc7b837616b47c24f2ff47279dd5addde7d32384f8b30b7d23681ce\" returns successfully" Jul 15 11:56:32.608081 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1725441444.mount: Deactivated successfully. Jul 15 11:56:32.611354 env[1245]: time="2025-07-15T11:56:32.611331298Z" level=info msg="CreateContainer within sandbox \"7ab4dc1fc97bdd4f9c7dcb867602652a61bd2bd1bd22a7ea44b338ecccec169f\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:2,} returns container id \"19862ad060891c67a7dbe5305ad32724594f2408436e889a6e0c7504ec428122\"" Jul 15 11:56:32.648728 env[1245]: time="2025-07-15T11:56:32.648690255Z" level=info msg="StartContainer for \"19862ad060891c67a7dbe5305ad32724594f2408436e889a6e0c7504ec428122\"" Jul 15 11:56:32.700859 systemd[1]: Started cri-containerd-19862ad060891c67a7dbe5305ad32724594f2408436e889a6e0c7504ec428122.scope. Jul 15 11:56:32.735964 kernel: audit: type=1400 audit(1752580592.724:1822): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.740487 kernel: audit: type=1400 audit(1752580592.724:1823): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.742339 kernel: audit: type=1400 audit(1752580592.724:1824): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.747987 kernel: audit: type=1400 audit(1752580592.724:1825): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.748029 kernel: audit: type=1400 audit(1752580592.724:1826): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.748049 kernel: audit: type=1400 audit(1752580592.724:1827): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.748066 kernel: audit: type=1400 audit(1752580592.724:1828): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.724000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.724000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit: BPF prog-id=267 op=LOAD Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[6763]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=1812 pid=6763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:32.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139383632616430363038393163363761376462653533303561643332 Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[6763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=1812 pid=6763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:32.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139383632616430363038393163363761376462653533303561643332 Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.727000 audit: BPF prog-id=268 op=LOAD Jul 15 11:56:32.727000 audit[6763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003093c0 items=0 ppid=1812 pid=6763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:32.727000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139383632616430363038393163363761376462653533303561643332 Jul 15 11:56:32.730000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.730000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.730000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.730000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.730000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.730000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.730000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.730000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.730000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.730000 audit: BPF prog-id=269 op=LOAD Jul 15 11:56:32.730000 audit[6763]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c000309408 items=0 ppid=1812 pid=6763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:32.730000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139383632616430363038393163363761376462653533303561643332 Jul 15 11:56:32.732000 audit: BPF prog-id=269 op=UNLOAD Jul 15 11:56:32.732000 audit: BPF prog-id=268 op=UNLOAD Jul 15 11:56:32.732000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.732000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.732000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.732000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.732000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.732000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.732000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.732000 audit[6763]: AVC avc: denied { perfmon } for pid=6763 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.732000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.732000 audit[6763]: AVC avc: denied { bpf } for pid=6763 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:56:32.732000 audit: BPF prog-id=270 op=LOAD Jul 15 11:56:32.732000 audit[6763]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c000309818 items=0 ppid=1812 pid=6763 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:32.732000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3139383632616430363038393163363761376462653533303561643332 Jul 15 11:56:32.808006 env[1245]: time="2025-07-15T11:56:32.761954305Z" level=info msg="StartContainer for \"19862ad060891c67a7dbe5305ad32724594f2408436e889a6e0c7504ec428122\" returns successfully" Jul 15 11:56:33.046691 kubelet[2102]: I0715 11:56:33.045881 2102 scope.go:117] "RemoveContainer" containerID="ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8" Jul 15 11:56:33.046943 kubelet[2102]: E0715 11:56:33.046929 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"kube-scheduler\" with CrashLoopBackOff: \"back-off 20s restarting failed container=kube-scheduler pod=kube-scheduler-localhost_kube-system(b35b56493416c25588cb530e37ffc065)\"" pod="kube-system/kube-scheduler-localhost" podUID="b35b56493416c25588cb530e37ffc065" Jul 15 11:56:33.603086 systemd[1]: run-containerd-runc-k8s.io-19862ad060891c67a7dbe5305ad32724594f2408436e889a6e0c7504ec428122-runc.xVoByr.mount: Deactivated successfully. Jul 15 11:56:33.976000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:33.976000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00056a600 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:33.976000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:33.977000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:33.977000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000d040e0 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:33.977000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:34.068497 kubelet[2102]: I0715 11:56:34.068473 2102 scope.go:117] "RemoveContainer" containerID="ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8" Jul 15 11:56:34.079059 kubelet[2102]: E0715 11:56:34.079041 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"kube-scheduler\" with CrashLoopBackOff: \"back-off 20s restarting failed container=kube-scheduler pod=kube-scheduler-localhost_kube-system(b35b56493416c25588cb530e37ffc065)\"" pod="kube-system/kube-scheduler-localhost" podUID="b35b56493416c25588cb530e37ffc065" Jul 15 11:56:34.162694 env[1245]: time="2025-07-15T11:56:34.162558813Z" level=info msg="StopPodSandbox for \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\"" Jul 15 11:56:35.062872 kubelet[2102]: I0715 11:56:35.062853 2102 scope.go:117] "RemoveContainer" containerID="ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8" Jul 15 11:56:35.063249 kubelet[2102]: E0715 11:56:35.063231 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"kube-scheduler\" with CrashLoopBackOff: \"back-off 20s restarting failed container=kube-scheduler pod=kube-scheduler-localhost_kube-system(b35b56493416c25588cb530e37ffc065)\"" pod="kube-system/kube-scheduler-localhost" podUID="b35b56493416c25588cb530e37ffc065" Jul 15 11:56:36.791395 systemd[1]: Started sshd@19-139.178.70.107:22-147.75.109.163:55756.service. Jul 15 11:56:36.961415 kernel: kauditd_printk_skb: 56 callbacks suppressed Jul 15 11:56:36.973520 kernel: audit: type=1130 audit(1752580596.794:1842): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.107:22-147.75.109.163:55756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:56:36.794000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.107:22-147.75.109.163:55756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:35.264 [WARNING][6798] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:35.283 [INFO][6798] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:35.283 [INFO][6798] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" iface="eth0" netns="" Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:35.285 [INFO][6798] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:35.285 [INFO][6798] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:36.693 [INFO][6805] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:36.734 [INFO][6805] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:36.739 [INFO][6805] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:37.046 [WARNING][6805] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:37.046 [INFO][6805] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:37.049 [INFO][6805] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:56:37.102861 env[1245]: 2025-07-15 11:56:37.072 [INFO][6798] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:56:37.123075 env[1245]: time="2025-07-15T11:56:37.106942936Z" level=info msg="TearDown network for sandbox \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\" successfully" Jul 15 11:56:37.123075 env[1245]: time="2025-07-15T11:56:37.106965300Z" level=info msg="StopPodSandbox for \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\" returns successfully" Jul 15 11:56:37.199000 audit[6812]: USER_ACCT pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:37.212483 kernel: audit: type=1101 audit(1752580597.199:1843): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:37.212608 kernel: audit: type=1103 audit(1752580597.207:1844): pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:37.212631 kernel: audit: type=1006 audit(1752580597.207:1845): pid=6812 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 15 11:56:37.207000 audit[6812]: CRED_ACQ pid=6812 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:37.215655 kernel: audit: type=1300 audit(1752580597.207:1845): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe4b54060 a2=3 a3=0 items=0 ppid=1 pid=6812 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:37.207000 audit[6812]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe4b54060 a2=3 a3=0 items=0 ppid=1 pid=6812 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:37.235320 kernel: audit: type=1327 audit(1752580597.207:1845): proctitle=737368643A20636F7265205B707269765D Jul 15 11:56:37.207000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:56:37.235422 sshd[6812]: Accepted publickey for core from 147.75.109.163 port 55756 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:56:37.223613 sshd[6812]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:56:37.308791 systemd-logind[1237]: New session 21 of user core. Jul 15 11:56:37.310832 systemd[1]: Started session-21.scope. Jul 15 11:56:37.319000 audit[6812]: USER_START pid=6812 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:37.320000 audit[6814]: CRED_ACQ pid=6814 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:37.327283 kernel: audit: type=1105 audit(1752580597.319:1846): pid=6812 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:37.329662 kernel: audit: type=1103 audit(1752580597.320:1847): pid=6814 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:56:40.383844 env[1245]: time="2025-07-15T11:56:40.374498999Z" level=info msg="RemovePodSandbox for \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\"" Jul 15 11:56:40.383844 env[1245]: time="2025-07-15T11:56:40.374549482Z" level=info msg="Forcibly stopping sandbox \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\"" Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:41.185 [WARNING][6829] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" WorkloadEndpoint="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:41.256 [INFO][6829] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:41.256 [INFO][6829] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" iface="eth0" netns="" Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:41.261 [INFO][6829] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:41.261 [INFO][6829] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:42.207 [INFO][6836] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:42.221 [INFO][6836] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:42.223 [INFO][6836] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:42.350 [WARNING][6836] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:42.350 [INFO][6836] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" HandleID="k8s-pod-network.279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Workload="localhost-k8s-calico--apiserver--759464fdbd--8t76s-eth0" Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:42.358 [INFO][6836] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:56:42.403836 env[1245]: 2025-07-15 11:56:42.380 [INFO][6829] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6" Jul 15 11:56:42.403836 env[1245]: time="2025-07-15T11:56:42.398520614Z" level=info msg="TearDown network for sandbox \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\" successfully" Jul 15 11:56:42.564200 env[1245]: time="2025-07-15T11:56:42.432961695Z" level=info msg="RemovePodSandbox \"279ef23abe98dd9aedc17b46872e05a583e4f4defaf2c8dfd1bc58075ef3fbf6\" returns successfully" Jul 15 11:56:44.473000 audit[4731]: AVC avc: denied { watch } for pid=4731 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1972882796/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c898 tclass=file permissive=0 Jul 15 11:56:44.561094 kernel: audit: type=1400 audit(1752580604.473:1848): avc: denied { watch } for pid=4731 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1972882796/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c898 tclass=file permissive=0 Jul 15 11:56:44.576725 kernel: audit: type=1300 audit(1752580604.473:1848): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0030eb0e0 a2=fc6 a3=0 items=0 ppid=3956 pid=4731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 key=(null) Jul 15 11:56:44.576778 kernel: audit: type=1327 audit(1752580604.473:1848): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:56:44.473000 audit[4731]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0030eb0e0 a2=fc6 a3=0 items=0 ppid=3956 pid=4731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 key=(null) Jul 15 11:56:44.473000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:56:45.376000 audit[4816]: AVC avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1645455470/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c446 tclass=file permissive=0 Jul 15 11:56:45.382928 kernel: audit: type=1400 audit(1752580605.376:1849): avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1645455470/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c446 tclass=file permissive=0 Jul 15 11:56:45.382984 kernel: audit: type=1300 audit(1752580605.376:1849): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0016555e0 a2=fc6 a3=0 items=0 ppid=4058 pid=4816 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 key=(null) Jul 15 11:56:45.376000 audit[4816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0016555e0 a2=fc6 a3=0 items=0 ppid=4058 pid=4816 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 key=(null) Jul 15 11:56:45.376000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:56:45.391250 kernel: audit: type=1327 audit(1752580605.376:1849): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:56:45.936000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:45.945418 kernel: audit: type=1400 audit(1752580605.936:1850): avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:45.945483 kernel: audit: type=1400 audit(1752580605.937:1851): avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:45.946607 kernel: audit: type=1300 audit(1752580605.937:1851): arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00948fd40 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:56:45.937000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:45.954235 kernel: audit: type=1327 audit(1752580605.937:1851): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:56:45.937000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c00948fd40 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:56:45.937000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:56:45.936000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5e a1=c00e94f760 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:56:45.936000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:56:45.941000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:45.941000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5e a1=c0115822d0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:56:45.941000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:56:45.998000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:45.998000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5e a1=c01168a000 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:56:45.998000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:56:46.020000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:46.020000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:46.020000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=5e a1=c00e94fa80 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:56:46.020000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:56:46.020000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c01168a030 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:56:46.020000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:56:52.760867 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 15 11:56:52.970835 kernel: audit: type=1400 audit(1752580612.736:1856): avc: denied { watch } for pid=6773 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:56:52.984535 kernel: audit: type=1300 audit(1752580612.736:1856): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00132c4c0 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:52.986844 kernel: audit: type=1327 audit(1752580612.736:1856): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:52.987798 kernel: audit: type=1400 audit(1752580612.740:1857): avc: denied { watch } for pid=6773 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:56:52.991368 kernel: audit: type=1300 audit(1752580612.740:1857): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0013461e0 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:52.992854 kernel: audit: type=1327 audit(1752580612.740:1857): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:52.736000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=7349 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:56:52.736000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00132c4c0 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:52.736000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:52.740000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=8262 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:56:52.740000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0013461e0 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:52.740000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:53.122000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:53.122000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:53.130110 kernel: audit: type=1400 audit(1752580613.122:1858): avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:53.130218 kernel: audit: type=1400 audit(1752580613.122:1859): avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:53.130243 kernel: audit: type=1300 audit(1752580613.122:1858): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ee93e0 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:53.122000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c000ee93e0 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:53.134722 kernel: audit: type=1327 audit(1752580613.122:1858): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:53.122000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:53.122000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c81800 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:53.122000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:53.128000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:53.128000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c81ca0 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:53.128000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:53.128000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:56:53.128000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c000c81e60 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:53.128000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:53.688000 audit[6866]: AVC avc: denied { execute } for pid=6866 comm="kube-controller" name="uds" dev="sda9" ino=8425 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 15 11:56:53.688000 audit[6866]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c0020db220 a1=c0005db650 a2=c00084ab00 a3=0 items=0 ppid=6773 pid=6866 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:56:53.688000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:56:55.306000 audit[6870]: NETFILTER_CFG table=filter:143 family=2 entries=32 op=nft_register_rule pid=6870 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:56:55.306000 audit[6870]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd370c25a0 a2=0 a3=7ffd370c258c items=0 ppid=2205 pid=6870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:55.306000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:56:55.312000 audit[6870]: NETFILTER_CFG table=nat:144 family=2 entries=44 op=nft_register_chain pid=6870 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:56:55.312000 audit[6870]: SYSCALL arch=c000003e syscall=46 success=yes exit=14660 a0=3 a1=7ffd370c25a0 a2=0 a3=7ffd370c258c items=0 ppid=2205 pid=6870 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:55.312000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:56:57.588000 audit[6872]: NETFILTER_CFG table=filter:145 family=2 entries=32 op=nft_register_rule pid=6872 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:56:57.588000 audit[6872]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd95154dd0 a2=0 a3=7ffd95154dbc items=0 ppid=2205 pid=6872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:57.588000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:56:57.596000 audit[6872]: NETFILTER_CFG table=nat:146 family=2 entries=44 op=nft_unregister_chain pid=6872 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:56:57.596000 audit[6872]: SYSCALL arch=c000003e syscall=46 success=yes exit=12900 a0=3 a1=7ffd95154dd0 a2=0 a3=7ffd95154dbc items=0 ppid=2205 pid=6872 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:56:57.596000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:56:59.803000 audit[4991]: AVC avc: denied { watch } for pid=4991 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_46.3179759843/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c442,c842 tclass=file permissive=0 Jul 15 11:57:00.068854 kernel: kauditd_printk_skb: 23 callbacks suppressed Jul 15 11:57:00.085711 kernel: audit: type=1400 audit(1752580619.803:1867): avc: denied { watch } for pid=4991 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_46.3179759843/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c442,c842 tclass=file permissive=0 Jul 15 11:57:00.090347 kernel: audit: type=1300 audit(1752580619.803:1867): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002a367e0 a2=fc6 a3=0 items=0 ppid=4888 pid=4991 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 key=(null) Jul 15 11:57:00.093710 kernel: audit: type=1327 audit(1752580619.803:1867): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:56:59.803000 audit[4991]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c002a367e0 a2=fc6 a3=0 items=0 ppid=4888 pid=4991 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 key=(null) Jul 15 11:56:59.803000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:57:34.032000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:34.204482 kernel: audit: type=1400 audit(1752580654.032:1868): avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:34.213799 kernel: audit: type=1300 audit(1752580654.032:1868): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001e69c50 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:57:34.213849 kernel: audit: type=1327 audit(1752580654.032:1868): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:57:34.213890 kernel: audit: type=1400 audit(1752580654.032:1869): avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:34.217372 kernel: audit: type=1300 audit(1752580654.032:1869): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001e6eb20 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:57:34.217400 kernel: audit: type=1327 audit(1752580654.032:1869): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:57:34.032000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001e69c50 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:57:34.032000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:57:34.032000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:34.032000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001e6eb20 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:57:34.032000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:57:39.369000 audit[6901]: NETFILTER_CFG table=filter:147 family=2 entries=32 op=nft_register_rule pid=6901 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:39.535603 kernel: audit: type=1325 audit(1752580659.369:1870): table=filter:147 family=2 entries=32 op=nft_register_rule pid=6901 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:39.547170 kernel: audit: type=1300 audit(1752580659.369:1870): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffcc85ae0b0 a2=0 a3=7ffcc85ae09c items=0 ppid=2205 pid=6901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:39.551810 kernel: audit: type=1327 audit(1752580659.369:1870): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:39.551870 kernel: audit: type=1325 audit(1752580659.393:1871): table=nat:148 family=2 entries=40 op=nft_register_rule pid=6901 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:39.553771 kernel: audit: type=1300 audit(1752580659.393:1871): arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffcc85ae0b0 a2=0 a3=7ffcc85ae09c items=0 ppid=2205 pid=6901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:39.553809 kernel: audit: type=1327 audit(1752580659.393:1871): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:39.369000 audit[6901]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffcc85ae0b0 a2=0 a3=7ffcc85ae09c items=0 ppid=2205 pid=6901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:39.369000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:39.393000 audit[6901]: NETFILTER_CFG table=nat:148 family=2 entries=40 op=nft_register_rule pid=6901 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:39.393000 audit[6901]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7ffcc85ae0b0 a2=0 a3=7ffcc85ae09c items=0 ppid=2205 pid=6901 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:39.393000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:41.483000 audit[6903]: NETFILTER_CFG table=filter:149 family=2 entries=32 op=nft_register_rule pid=6903 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:41.747548 kernel: audit: type=1325 audit(1752580661.483:1872): table=filter:149 family=2 entries=32 op=nft_register_rule pid=6903 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:41.798301 kernel: audit: type=1300 audit(1752580661.483:1872): arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd3d83f660 a2=0 a3=7ffd3d83f64c items=0 ppid=2205 pid=6903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:41.800505 kernel: audit: type=1327 audit(1752580661.483:1872): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:41.800530 kernel: audit: type=1325 audit(1752580661.500:1873): table=nat:150 family=2 entries=62 op=nft_unregister_chain pid=6903 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:41.483000 audit[6903]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffd3d83f660 a2=0 a3=7ffd3d83f64c items=0 ppid=2205 pid=6903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:41.483000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:41.500000 audit[6903]: NETFILTER_CFG table=nat:150 family=2 entries=62 op=nft_unregister_chain pid=6903 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:41.500000 audit[6903]: SYSCALL arch=c000003e syscall=46 success=yes exit=16884 a0=3 a1=7ffd3d83f660 a2=0 a3=7ffd3d83f64c items=0 ppid=2205 pid=6903 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:41.500000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:43.815000 audit[6906]: NETFILTER_CFG table=filter:151 family=2 entries=32 op=nft_register_rule pid=6906 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:43.815000 audit[6906]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffccba32650 a2=0 a3=7ffccba3263c items=0 ppid=2205 pid=6906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:43.815000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:43.826000 audit[6906]: NETFILTER_CFG table=nat:152 family=2 entries=38 op=nft_unregister_chain pid=6906 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:43.826000 audit[6906]: SYSCALL arch=c000003e syscall=46 success=yes exit=11012 a0=3 a1=7ffccba32650 a2=0 a3=7ffccba3263c items=0 ppid=2205 pid=6906 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:43.826000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:44.657000 audit[4731]: AVC avc: denied { watch } for pid=4731 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1972882796/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c898 tclass=file permissive=0 Jul 15 11:57:44.832772 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 15 11:57:44.848822 kernel: audit: type=1400 audit(1752580664.657:1876): avc: denied { watch } for pid=4731 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1972882796/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c840,c898 tclass=file permissive=0 Jul 15 11:57:44.851391 kernel: audit: type=1300 audit(1752580664.657:1876): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0027f9380 a2=fc6 a3=0 items=0 ppid=3956 pid=4731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 key=(null) Jul 15 11:57:44.851421 kernel: audit: type=1327 audit(1752580664.657:1876): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:57:44.657000 audit[4731]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0027f9380 a2=fc6 a3=0 items=0 ppid=3956 pid=4731 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c840,c898 key=(null) Jul 15 11:57:44.657000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:57:45.398000 audit[4816]: AVC avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1645455470/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c446 tclass=file permissive=0 Jul 15 11:57:45.552724 kernel: audit: type=1400 audit(1752580665.398:1877): avc: denied { watch } for pid=4816 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_16.1645455470/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c296,c446 tclass=file permissive=0 Jul 15 11:57:45.559797 kernel: audit: type=1300 audit(1752580665.398:1877): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002458380 a2=fc6 a3=0 items=0 ppid=4058 pid=4816 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 key=(null) Jul 15 11:57:45.562196 kernel: audit: type=1327 audit(1752580665.398:1877): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:57:45.398000 audit[4816]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c002458380 a2=fc6 a3=0 items=0 ppid=4058 pid=4816 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c296,c446 key=(null) Jul 15 11:57:45.398000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:57:45.957000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:46.124210 kernel: audit: type=1400 audit(1752580665.957:1878): avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:46.151667 kernel: audit: type=1300 audit(1752580665.957:1878): arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c0105fade0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:57:46.161108 kernel: audit: type=1327 audit(1752580665.957:1878): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:57:46.167798 kernel: audit: type=1400 audit(1752580665.959:1879): avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:45.957000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=46 a1=c0105fade0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:57:45.957000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:57:45.959000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=7324 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:45.959000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=49 a1=c01245b8f0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:57:45.959000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:57:45.977000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:45.977000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c011845440 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:57:45.977000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:57:46.021000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=7318 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:46.021000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0118454a0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:57:46.021000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:57:46.026000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:46.026000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c01245bad0 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:57:46.026000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:57:46.048000 audit[1942]: AVC avc: denied { watch } for pid=1942 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:46.048000 audit[1942]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c00de12e20 a2=fc6 a3=0 items=0 ppid=1787 pid=1942 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c238,c849 key=(null) Jul 15 11:57:46.048000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313037002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:57:47.172000 audit[6908]: NETFILTER_CFG table=filter:153 family=2 entries=33 op=nft_register_rule pid=6908 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:47.172000 audit[6908]: SYSCALL arch=c000003e syscall=46 success=yes exit=12688 a0=3 a1=7ffc161fa0c0 a2=0 a3=7ffc161fa0ac items=0 ppid=2205 pid=6908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:47.172000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:47.182000 audit[6908]: NETFILTER_CFG table=nat:154 family=2 entries=31 op=nft_unregister_chain pid=6908 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:47.182000 audit[6908]: SYSCALL arch=c000003e syscall=46 success=yes exit=7564 a0=3 a1=7ffc161fa0c0 a2=0 a3=0 items=0 ppid=2205 pid=6908 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:47.182000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:53.238000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:53.494118 kernel: kauditd_printk_skb: 20 callbacks suppressed Jul 15 11:57:53.577982 kernel: audit: type=1400 audit(1752580673.238:1886): avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:53.601678 kernel: audit: type=1300 audit(1752580673.238:1886): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0015aa120 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:57:53.608579 kernel: audit: type=1327 audit(1752580673.238:1886): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:57:53.611173 kernel: audit: type=1400 audit(1752580673.323:1887): avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:53.613244 kernel: audit: type=1300 audit(1752580673.323:1887): arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0017c0140 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:57:53.613296 kernel: audit: type=1327 audit(1752580673.323:1887): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:57:53.617020 kernel: audit: type=1400 audit(1752580673.392:1888): avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:53.621642 kernel: audit: type=1300 audit(1752580673.392:1888): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0015aa2c0 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:57:53.625587 kernel: audit: type=1327 audit(1752580673.392:1888): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:57:53.634709 kernel: audit: type=1400 audit(1752580673.479:1889): avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:53.238000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0015aa120 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:57:53.238000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:57:53.323000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:53.323000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=e a1=c0017c0140 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:57:53.323000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:57:53.392000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:53.392000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0015aa2c0 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:57:53.392000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:57:53.479000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:57:53.479000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0015aa340 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:57:53.479000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:57:53.491000 audit[6918]: NETFILTER_CFG table=filter:155 family=2 entries=35 op=nft_register_rule pid=6918 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:53.491000 audit[6918]: SYSCALL arch=c000003e syscall=46 success=yes exit=13432 a0=3 a1=7ffcc0f1d330 a2=0 a3=7ffcc0f1d31c items=0 ppid=2205 pid=6918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:53.491000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:53.504000 audit[6918]: NETFILTER_CFG table=nat:156 family=2 entries=29 op=nft_unregister_chain pid=6918 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:53.504000 audit[6918]: SYSCALL arch=c000003e syscall=46 success=yes exit=6796 a0=3 a1=7ffcc0f1d330 a2=0 a3=0 items=0 ppid=2205 pid=6918 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:53.504000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:58.317000 audit[6922]: NETFILTER_CFG table=filter:157 family=2 entries=37 op=nft_register_rule pid=6922 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:58.560903 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 15 11:57:58.582836 kernel: audit: type=1325 audit(1752580678.317:1892): table=filter:157 family=2 entries=37 op=nft_register_rule pid=6922 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:58.590933 kernel: audit: type=1300 audit(1752580678.317:1892): arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffc31c928c0 a2=0 a3=7ffc31c928ac items=0 ppid=2205 pid=6922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:58.593526 kernel: audit: type=1327 audit(1752580678.317:1892): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:58.597263 kernel: audit: type=1325 audit(1752580678.332:1893): table=nat:158 family=2 entries=27 op=nft_unregister_chain pid=6922 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:58.599117 kernel: audit: type=1300 audit(1752580678.332:1893): arch=c000003e syscall=46 success=yes exit=6028 a0=3 a1=7ffc31c928c0 a2=0 a3=0 items=0 ppid=2205 pid=6922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:58.601214 kernel: audit: type=1327 audit(1752580678.332:1893): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:58.317000 audit[6922]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffc31c928c0 a2=0 a3=7ffc31c928ac items=0 ppid=2205 pid=6922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:58.317000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:58.332000 audit[6922]: NETFILTER_CFG table=nat:158 family=2 entries=27 op=nft_unregister_chain pid=6922 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:57:58.332000 audit[6922]: SYSCALL arch=c000003e syscall=46 success=yes exit=6028 a0=3 a1=7ffc31c928c0 a2=0 a3=0 items=0 ppid=2205 pid=6922 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:57:58.332000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:57:59.976000 audit[4991]: AVC avc: denied { watch } for pid=4991 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_46.3179759843/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c442,c842 tclass=file permissive=0 Jul 15 11:58:00.141219 kernel: audit: type=1400 audit(1752580679.976:1894): avc: denied { watch } for pid=4991 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_52_46.3179759843/tls.crt" dev="tmpfs" ino=4 scontext=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c442,c842 tclass=file permissive=0 Jul 15 11:58:00.150604 kernel: audit: type=1300 audit(1752580679.976:1894): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00150f820 a2=fc6 a3=0 items=0 ppid=4888 pid=4991 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 key=(null) Jul 15 11:58:00.150656 kernel: audit: type=1327 audit(1752580679.976:1894): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:57:59.976000 audit[4991]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c00150f820 a2=fc6 a3=0 items=0 ppid=4888 pid=4991 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c442,c842 key=(null) Jul 15 11:57:59.976000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:58:05.789000 audit[6924]: NETFILTER_CFG table=filter:159 family=2 entries=39 op=nft_register_rule pid=6924 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:05.964744 kernel: audit: type=1325 audit(1752580685.789:1895): table=filter:159 family=2 entries=39 op=nft_register_rule pid=6924 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:05.981354 kernel: audit: type=1300 audit(1752580685.789:1895): arch=c000003e syscall=46 success=yes exit=14920 a0=3 a1=7fff9353bad0 a2=0 a3=7fff9353babc items=0 ppid=2205 pid=6924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:05.985309 kernel: audit: type=1327 audit(1752580685.789:1895): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:05.985336 kernel: audit: type=1325 audit(1752580685.805:1896): table=nat:160 family=2 entries=25 op=nft_unregister_chain pid=6924 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:05.987487 kernel: audit: type=1300 audit(1752580685.805:1896): arch=c000003e syscall=46 success=yes exit=5260 a0=3 a1=7fff9353bad0 a2=0 a3=0 items=0 ppid=2205 pid=6924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:05.988889 kernel: audit: type=1327 audit(1752580685.805:1896): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:05.789000 audit[6924]: SYSCALL arch=c000003e syscall=46 success=yes exit=14920 a0=3 a1=7fff9353bad0 a2=0 a3=7fff9353babc items=0 ppid=2205 pid=6924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:05.789000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:05.805000 audit[6924]: NETFILTER_CFG table=nat:160 family=2 entries=25 op=nft_unregister_chain pid=6924 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:05.805000 audit[6924]: SYSCALL arch=c000003e syscall=46 success=yes exit=5260 a0=3 a1=7fff9353bad0 a2=0 a3=0 items=0 ppid=2205 pid=6924 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:05.805000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:07.601245 systemd[1]: cri-containerd-e6f726d791508aa217196978540db3d186cfc4eafffe0fcfa295c4f0069bf1b8.scope: Deactivated successfully. Jul 15 11:58:07.762770 kernel: audit: type=1334 audit(1752580687.608:1897): prog-id=255 op=UNLOAD Jul 15 11:58:07.762854 kernel: audit: type=1334 audit(1752580687.614:1898): prog-id=258 op=UNLOAD Jul 15 11:58:07.608000 audit: BPF prog-id=255 op=UNLOAD Jul 15 11:58:07.614000 audit: BPF prog-id=258 op=UNLOAD Jul 15 11:58:07.787162 env[1245]: time="2025-07-15T11:58:07.671401354Z" level=info msg="shim disconnected" id=e6f726d791508aa217196978540db3d186cfc4eafffe0fcfa295c4f0069bf1b8 Jul 15 11:58:07.787162 env[1245]: time="2025-07-15T11:58:07.671431383Z" level=warning msg="cleaning up after shim disconnected" id=e6f726d791508aa217196978540db3d186cfc4eafffe0fcfa295c4f0069bf1b8 namespace=k8s.io Jul 15 11:58:07.787162 env[1245]: time="2025-07-15T11:58:07.671452325Z" level=info msg="cleaning up dead shim" Jul 15 11:58:07.787162 env[1245]: time="2025-07-15T11:58:07.677705068Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:58:07Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6937 runtime=io.containerd.runc.v2\n" Jul 15 11:58:07.610103 systemd[1]: cri-containerd-e6f726d791508aa217196978540db3d186cfc4eafffe0fcfa295c4f0069bf1b8.scope: Consumed 2.212s CPU time. Jul 15 11:58:07.709083 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-e6f726d791508aa217196978540db3d186cfc4eafffe0fcfa295c4f0069bf1b8-rootfs.mount: Deactivated successfully. Jul 15 11:58:07.866000 audit[6951]: NETFILTER_CFG table=filter:161 family=2 entries=43 op=nft_register_rule pid=6951 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:07.883171 kernel: audit: type=1325 audit(1752580687.866:1899): table=filter:161 family=2 entries=43 op=nft_register_rule pid=6951 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:07.884153 kernel: audit: type=1300 audit(1752580687.866:1899): arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fffa86b5ed0 a2=0 a3=7fffa86b5ebc items=0 ppid=2205 pid=6951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:07.866000 audit[6951]: SYSCALL arch=c000003e syscall=46 success=yes exit=17152 a0=3 a1=7fffa86b5ed0 a2=0 a3=7fffa86b5ebc items=0 ppid=2205 pid=6951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:07.866000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:07.879000 audit[6951]: NETFILTER_CFG table=nat:162 family=2 entries=33 op=nft_unregister_chain pid=6951 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:07.879000 audit[6951]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7fffa86b5ed0 a2=0 a3=0 items=0 ppid=2205 pid=6951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:07.879000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:09.565365 sshd[6812]: pam_unix(sshd:session): session closed for user core Jul 15 11:58:09.603000 audit[6812]: USER_END pid=6812 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:09.608000 audit[6812]: CRED_DISP pid=6812 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:09.630000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.107:22-147.75.109.163:55756 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:09.627304 systemd[1]: sshd@19-139.178.70.107:22-147.75.109.163:55756.service: Deactivated successfully. Jul 15 11:58:09.633748 systemd[1]: session-21.scope: Deactivated successfully. Jul 15 11:58:09.633843 systemd[1]: session-21.scope: Consumed 8.958s CPU time. Jul 15 11:58:09.638107 systemd-logind[1237]: Session 21 logged out. Waiting for processes to exit. Jul 15 11:58:09.647800 systemd-logind[1237]: Removed session 21. Jul 15 11:58:09.925779 kubelet[2102]: I0715 11:58:09.923210 2102 setters.go:600] "Node became not ready" node="localhost" condition={"type":"Ready","status":"False","lastHeartbeatTime":"2025-07-15T11:58:09Z","lastTransitionTime":"2025-07-15T11:58:09Z","reason":"KubeletNotReady","message":"container runtime is down"} Jul 15 11:58:10.025115 kubelet[2102]: E0715 11:58:10.025092 2102 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1m32.505s" Jul 15 11:58:10.028420 kubelet[2102]: E0715 11:58:10.028400 2102 kubelet.go:2345] "Skipping pod synchronization" err="container runtime is down" Jul 15 11:58:10.160602 systemd[1]: run-containerd-runc-k8s.io-9a2e30c26537cb22929ed2a1706326694ea416cd4dcebafc3274ae8ebb19c692-runc.hgGHVx.mount: Deactivated successfully. Jul 15 11:58:11.169476 systemd[1]: run-containerd-runc-k8s.io-f8fb2b3f90496de1bda8d513969b4b1a4823ca23f00aeb1648222b72cc3bffd1-runc.ajrehL.mount: Deactivated successfully. Jul 15 11:58:11.803357 kubelet[2102]: I0715 11:58:10.678938 2102 scope.go:117] "RemoveContainer" containerID="32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821" Jul 15 11:58:12.324050 kubelet[2102]: E0715 11:58:12.324028 2102 kubelet.go:2345] "Skipping pod synchronization" err="container runtime is down" Jul 15 11:58:14.609091 systemd[1]: Started sshd@20-139.178.70.107:22-147.75.109.163:54018.service. Jul 15 11:58:14.671482 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:58:14.674079 kernel: audit: type=1130 audit(1752580694.609:1904): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.107:22-147.75.109.163:54018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:14.609000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.107:22-147.75.109.163:54018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:14.893000 audit[7152]: USER_ACCT pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:14.905163 kernel: audit: type=1101 audit(1752580694.893:1905): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:14.905223 kernel: audit: type=1103 audit(1752580694.898:1906): pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:14.905834 kernel: audit: type=1006 audit(1752580694.898:1907): pid=7152 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=22 res=1 Jul 15 11:58:14.898000 audit[7152]: CRED_ACQ pid=7152 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:14.908878 kernel: audit: type=1300 audit(1752580694.898:1907): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3266bf00 a2=3 a3=0 items=0 ppid=1 pid=7152 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:14.898000 audit[7152]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc3266bf00 a2=3 a3=0 items=0 ppid=1 pid=7152 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:14.928786 kernel: audit: type=1327 audit(1752580694.898:1907): proctitle=737368643A20636F7265205B707269765D Jul 15 11:58:14.898000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:58:14.928917 sshd[7152]: Accepted publickey for core from 147.75.109.163 port 54018 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:58:14.906409 sshd[7152]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:58:14.976522 systemd-logind[1237]: New session 22 of user core. Jul 15 11:58:14.978937 systemd[1]: Started session-22.scope. Jul 15 11:58:14.983000 audit[7152]: USER_START pid=7152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:14.987000 audit[7154]: CRED_ACQ pid=7154 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:14.991997 kernel: audit: type=1105 audit(1752580694.983:1908): pid=7152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:14.992035 kernel: audit: type=1103 audit(1752580694.987:1909): pid=7154 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:16.101204 env[1245]: time="2025-07-15T11:58:16.092893684Z" level=info msg="RemoveContainer for \"32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821\"" Jul 15 11:58:16.131885 env[1245]: time="2025-07-15T11:58:16.108398730Z" level=info msg="RemoveContainer for \"32465a682a5768be0b322ceb709e393b17abf1c3febe63e5d6dcd31aa894f821\" returns successfully" Jul 15 11:58:16.499553 kubelet[2102]: E0715 11:58:16.496670 2102 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2.761s" Jul 15 11:58:16.608777 kubelet[2102]: I0715 11:58:16.608757 2102 scope.go:117] "RemoveContainer" containerID="ebd1c072d776f58b6a8de1154c01076b1e8755fb4f472fc327390815e9c71dd8" Jul 15 11:58:17.116788 env[1245]: time="2025-07-15T11:58:17.116366290Z" level=info msg="StopContainer for \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\" with timeout 30 (s)" Jul 15 11:58:17.126940 env[1245]: time="2025-07-15T11:58:17.126599277Z" level=info msg="Stop container \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\" with signal terminated" Jul 15 11:58:17.192193 systemd[1]: cri-containerd-0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a.scope: Deactivated successfully. Jul 15 11:58:17.250172 kernel: audit: type=1334 audit(1752580697.198:1910): prog-id=217 op=UNLOAD Jul 15 11:58:17.263709 kernel: audit: type=1334 audit(1752580697.202:1911): prog-id=220 op=UNLOAD Jul 15 11:58:17.198000 audit: BPF prog-id=217 op=UNLOAD Jul 15 11:58:17.202000 audit: BPF prog-id=220 op=UNLOAD Jul 15 11:58:17.284137 env[1245]: time="2025-07-15T11:58:17.232102621Z" level=info msg="shim disconnected" id=0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a Jul 15 11:58:17.284137 env[1245]: time="2025-07-15T11:58:17.232137682Z" level=warning msg="cleaning up after shim disconnected" id=0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a namespace=k8s.io Jul 15 11:58:17.284137 env[1245]: time="2025-07-15T11:58:17.232146789Z" level=info msg="cleaning up dead shim" Jul 15 11:58:17.284137 env[1245]: time="2025-07-15T11:58:17.241050530Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:58:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7181 runtime=io.containerd.runc.v2\ntime=\"2025-07-15T11:58:17Z\" level=warning msg=\"failed to remove runc container\" error=\"runc did not terminate successfully: exit status 255: \" runtime=io.containerd.runc.v2\n" Jul 15 11:58:17.284137 env[1245]: time="2025-07-15T11:58:17.267757637Z" level=info msg="StopContainer for \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\" returns successfully" Jul 15 11:58:17.205755 systemd[1]: cri-containerd-0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a.scope: Consumed 1.778s CPU time. Jul 15 11:58:17.265059 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a-rootfs.mount: Deactivated successfully. Jul 15 11:58:17.382642 env[1245]: time="2025-07-15T11:58:17.380185762Z" level=info msg="StopPodSandbox for \"50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c\"" Jul 15 11:58:17.382642 env[1245]: time="2025-07-15T11:58:17.380234381Z" level=info msg="Container to stop \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 15 11:58:17.382229 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c-shm.mount: Deactivated successfully. Jul 15 11:58:17.397094 systemd[1]: cri-containerd-50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c.scope: Deactivated successfully. Jul 15 11:58:17.395000 audit: BPF prog-id=173 op=UNLOAD Jul 15 11:58:17.399000 audit: BPF prog-id=176 op=UNLOAD Jul 15 11:58:17.411847 env[1245]: time="2025-07-15T11:58:17.411213694Z" level=info msg="CreateContainer within sandbox \"0484e9e7eeeb3a1380931355efbe852caad27ef8b625add30e5e966d4487b41d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:3,}" Jul 15 11:58:17.414787 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c-rootfs.mount: Deactivated successfully. Jul 15 11:58:17.418001 env[1245]: time="2025-07-15T11:58:17.415962269Z" level=info msg="shim disconnected" id=50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c Jul 15 11:58:17.418001 env[1245]: time="2025-07-15T11:58:17.415990576Z" level=warning msg="cleaning up after shim disconnected" id=50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c namespace=k8s.io Jul 15 11:58:17.418001 env[1245]: time="2025-07-15T11:58:17.415998806Z" level=info msg="cleaning up dead shim" Jul 15 11:58:17.422786 env[1245]: time="2025-07-15T11:58:17.422761772Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:58:17Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=7213 runtime=io.containerd.runc.v2\n" Jul 15 11:58:17.511481 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1080941994.mount: Deactivated successfully. Jul 15 11:58:17.516767 env[1245]: time="2025-07-15T11:58:17.516739488Z" level=info msg="CreateContainer within sandbox \"0484e9e7eeeb3a1380931355efbe852caad27ef8b625add30e5e966d4487b41d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:3,} returns container id \"d5109677232cc59e21d2178d16603341a2ed8d59bc3214bf67c45c5e1a0e3f6f\"" Jul 15 11:58:17.529000 audit[7238]: NETFILTER_CFG table=filter:163 family=2 entries=45 op=nft_register_rule pid=7238 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:17.529000 audit[7238]: SYSCALL arch=c000003e syscall=46 success=yes exit=16408 a0=3 a1=7ffd5ba42c20 a2=0 a3=7ffd5ba42c0c items=0 ppid=2205 pid=7238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:17.529000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:17.534000 audit[7238]: NETFILTER_CFG table=nat:164 family=2 entries=19 op=nft_register_chain pid=7238 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:17.534000 audit[7238]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffd5ba42c20 a2=0 a3=0 items=0 ppid=2205 pid=7238 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:17.534000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:17.853920 env[1245]: time="2025-07-15T11:58:17.853895716Z" level=info msg="StartContainer for \"d5109677232cc59e21d2178d16603341a2ed8d59bc3214bf67c45c5e1a0e3f6f\"" Jul 15 11:58:17.916792 systemd[1]: Started cri-containerd-d5109677232cc59e21d2178d16603341a2ed8d59bc3214bf67c45c5e1a0e3f6f.scope. Jul 15 11:58:17.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.940000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.940000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.940000 audit: BPF prog-id=271 op=LOAD Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=1839 pid=7252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:17.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435313039363737323332636335396532316432313738643136363033 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=1839 pid=7252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:17.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435313039363737323332636335396532316432313738643136363033 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit: BPF prog-id=272 op=LOAD Jul 15 11:58:17.941000 audit[7252]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00034c980 items=0 ppid=1839 pid=7252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:17.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435313039363737323332636335396532316432313738643136363033 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit: BPF prog-id=273 op=LOAD Jul 15 11:58:17.941000 audit[7252]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00034c9c8 items=0 ppid=1839 pid=7252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:17.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435313039363737323332636335396532316432313738643136363033 Jul 15 11:58:17.941000 audit: BPF prog-id=273 op=UNLOAD Jul 15 11:58:17.941000 audit: BPF prog-id=272 op=UNLOAD Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { perfmon } for pid=7252 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit[7252]: AVC avc: denied { bpf } for pid=7252 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:58:17.941000 audit: BPF prog-id=274 op=LOAD Jul 15 11:58:17.941000 audit[7252]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00034cdd8 items=0 ppid=1839 pid=7252 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:17.941000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6435313039363737323332636335396532316432313738643136363033 Jul 15 11:58:17.998052 env[1245]: time="2025-07-15T11:58:17.971972984Z" level=info msg="StartContainer for \"d5109677232cc59e21d2178d16603341a2ed8d59bc3214bf67c45c5e1a0e3f6f\" returns successfully" Jul 15 11:58:18.240876 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3758468584.mount: Deactivated successfully. Jul 15 11:58:18.337280 systemd-networkd[1058]: calibd21ab51d78: Link DOWN Jul 15 11:58:18.337287 systemd-networkd[1058]: calibd21ab51d78: Lost carrier Jul 15 11:58:18.777000 audit[7294]: NETFILTER_CFG table=filter:165 family=2 entries=55 op=nft_register_rule pid=7294 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:58:18.777000 audit[7294]: SYSCALL arch=c000003e syscall=46 success=yes exit=8944 a0=3 a1=7ffdd3179860 a2=0 a3=7ffdd317984c items=0 ppid=3428 pid=7294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:18.777000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:58:18.778000 audit[7294]: NETFILTER_CFG table=filter:166 family=2 entries=2 op=nft_unregister_chain pid=7294 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:58:18.778000 audit[7294]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffdd3179860 a2=0 a3=5559bc212000 items=0 ppid=3428 pid=7294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:18.778000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:18.244 [INFO][7239] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:18.294 [INFO][7239] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" iface="eth0" netns="/var/run/netns/cni-50e9e28c-e2d3-32f4-a348-fd544961b075" Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:18.301 [INFO][7239] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" iface="eth0" netns="/var/run/netns/cni-50e9e28c-e2d3-32f4-a348-fd544961b075" Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:18.321 [INFO][7239] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" after=26.075065ms iface="eth0" netns="/var/run/netns/cni-50e9e28c-e2d3-32f4-a348-fd544961b075" Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:18.321 [INFO][7239] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:18.321 [INFO][7239] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:18.874 [INFO][7282] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" HandleID="k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:18.883 [INFO][7282] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:18.884 [INFO][7282] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:19.359 [INFO][7282] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" HandleID="k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:19.360 [INFO][7282] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" HandleID="k8s-pod-network.50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Workload="localhost-k8s-calico--apiserver--759464fdbd--cvd46-eth0" Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:19.364 [INFO][7282] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:58:19.428275 env[1245]: 2025-07-15 11:58:19.395 [INFO][7239] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c" Jul 15 11:58:19.516676 env[1245]: time="2025-07-15T11:58:19.428608073Z" level=info msg="TearDown network for sandbox \"50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c\" successfully" Jul 15 11:58:19.516676 env[1245]: time="2025-07-15T11:58:19.428631679Z" level=info msg="StopPodSandbox for \"50ba76ea34c0199582cf5ea72f9aeb3cc2ccf1289df8ecc6b04cb239d754082c\" returns successfully" Jul 15 11:58:19.487074 systemd[1]: run-netns-cni\x2d50e9e28c\x2de2d3\x2d32f4\x2da348\x2dfd544961b075.mount: Deactivated successfully. Jul 15 11:58:21.689086 kubelet[2102]: E0715 11:58:21.689026 2102 kubelet.go:2512] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.467s" Jul 15 11:58:21.928880 sshd[7152]: pam_unix(sshd:session): session closed for user core Jul 15 11:58:21.959000 audit[7152]: USER_END pid=7152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:21.973325 kernel: kauditd_printk_skb: 71 callbacks suppressed Jul 15 11:58:21.976419 kernel: audit: type=1106 audit(1752580701.959:1936): pid=7152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:21.977883 kernel: audit: type=1104 audit(1752580701.959:1937): pid=7152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:21.959000 audit[7152]: CRED_DISP pid=7152 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:21.982105 systemd[1]: sshd@20-139.178.70.107:22-147.75.109.163:54018.service: Deactivated successfully. Jul 15 11:58:21.987893 kernel: audit: type=1131 audit(1752580701.981:1938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.107:22-147.75.109.163:54018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:21.981000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.107:22-147.75.109.163:54018 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:21.986639 systemd[1]: session-22.scope: Deactivated successfully. Jul 15 11:58:21.986735 systemd[1]: session-22.scope: Consumed 1.265s CPU time. Jul 15 11:58:21.987094 systemd-logind[1237]: Session 22 logged out. Waiting for processes to exit. Jul 15 11:58:21.994521 systemd-logind[1237]: Removed session 22. Jul 15 11:58:22.795000 audit[7319]: NETFILTER_CFG table=filter:167 family=2 entries=41 op=nft_register_rule pid=7319 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:22.822281 kernel: audit: type=1325 audit(1752580702.795:1939): table=filter:167 family=2 entries=41 op=nft_register_rule pid=7319 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:22.822352 kernel: audit: type=1300 audit(1752580702.795:1939): arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffc5fcb5b10 a2=0 a3=7ffc5fcb5afc items=0 ppid=2205 pid=7319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:22.823084 kernel: audit: type=1327 audit(1752580702.795:1939): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:22.823566 kernel: audit: type=1325 audit(1752580702.805:1940): table=nat:168 family=2 entries=35 op=nft_register_chain pid=7319 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:22.824583 kernel: audit: type=1300 audit(1752580702.805:1940): arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffc5fcb5b10 a2=0 a3=7ffc5fcb5afc items=0 ppid=2205 pid=7319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:22.824608 kernel: audit: type=1327 audit(1752580702.805:1940): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:22.795000 audit[7319]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffc5fcb5b10 a2=0 a3=7ffc5fcb5afc items=0 ppid=2205 pid=7319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:22.795000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:22.805000 audit[7319]: NETFILTER_CFG table=nat:168 family=2 entries=35 op=nft_register_chain pid=7319 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:22.805000 audit[7319]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffc5fcb5b10 a2=0 a3=7ffc5fcb5afc items=0 ppid=2205 pid=7319 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:22.805000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:22.836000 audit[7326]: NETFILTER_CFG table=filter:169 family=2 entries=38 op=nft_register_rule pid=7326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:22.836000 audit[7326]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffeb7e487b0 a2=0 a3=7ffeb7e4879c items=0 ppid=2205 pid=7326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:22.836000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:22.840825 kernel: audit: type=1325 audit(1752580702.836:1941): table=filter:169 family=2 entries=38 op=nft_register_rule pid=7326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:22.849000 audit[7326]: NETFILTER_CFG table=nat:170 family=2 entries=56 op=nft_register_chain pid=7326 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:22.849000 audit[7326]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffeb7e487b0 a2=0 a3=7ffeb7e4879c items=0 ppid=2205 pid=7326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:22.849000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:22.854507 kubelet[2102]: I0715 11:58:22.850526 2102 scope.go:117] "RemoveContainer" containerID="e6f726d791508aa217196978540db3d186cfc4eafffe0fcfa295c4f0069bf1b8" Jul 15 11:58:22.900474 kubelet[2102]: E0715 11:58:22.899309 2102 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 20s restarting failed container=tigera-operator pod=tigera-operator-5bf8dfcb4-69jm2_tigera-operator(9349e0f0-43d0-4326-8e58-59ca9030df46)\"" pod="tigera-operator/tigera-operator-5bf8dfcb4-69jm2" podUID="9349e0f0-43d0-4326-8e58-59ca9030df46" Jul 15 11:58:23.280243 kubelet[2102]: I0715 11:58:23.279832 2102 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/12ff45d2-4237-4a75-a49b-5d1934e0deb7-calico-apiserver-certs\") pod \"12ff45d2-4237-4a75-a49b-5d1934e0deb7\" (UID: \"12ff45d2-4237-4a75-a49b-5d1934e0deb7\") " Jul 15 11:58:23.280243 kubelet[2102]: I0715 11:58:23.279881 2102 reconciler_common.go:159] "operationExecutor.UnmountVolume started for volume \"kube-api-access-v8pwz\" (UniqueName: \"kubernetes.io/projected/12ff45d2-4237-4a75-a49b-5d1934e0deb7-kube-api-access-v8pwz\") pod \"12ff45d2-4237-4a75-a49b-5d1934e0deb7\" (UID: \"12ff45d2-4237-4a75-a49b-5d1934e0deb7\") " Jul 15 11:58:23.391789 kubelet[2102]: I0715 11:58:23.391771 2102 scope.go:117] "RemoveContainer" containerID="0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a" Jul 15 11:58:23.591642 systemd[1]: var-lib-kubelet-pods-12ff45d2\x2d4237\x2d4a75\x2da49b\x2d5d1934e0deb7-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dv8pwz.mount: Deactivated successfully. Jul 15 11:58:23.614712 systemd[1]: var-lib-kubelet-pods-12ff45d2\x2d4237\x2d4a75\x2da49b\x2d5d1934e0deb7-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 15 11:58:23.793712 kubelet[2102]: I0715 11:58:23.782587 2102 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/12ff45d2-4237-4a75-a49b-5d1934e0deb7-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "12ff45d2-4237-4a75-a49b-5d1934e0deb7" (UID: "12ff45d2-4237-4a75-a49b-5d1934e0deb7"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGidValue "" Jul 15 11:58:23.794839 kubelet[2102]: I0715 11:58:23.794813 2102 operation_generator.go:803] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/12ff45d2-4237-4a75-a49b-5d1934e0deb7-kube-api-access-v8pwz" (OuterVolumeSpecName: "kube-api-access-v8pwz") pod "12ff45d2-4237-4a75-a49b-5d1934e0deb7" (UID: "12ff45d2-4237-4a75-a49b-5d1934e0deb7"). InnerVolumeSpecName "kube-api-access-v8pwz". PluginName "kubernetes.io/projected", VolumeGidValue "" Jul 15 11:58:23.888717 env[1245]: time="2025-07-15T11:58:23.888633943Z" level=info msg="RemoveContainer for \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\"" Jul 15 11:58:23.979711 env[1245]: time="2025-07-15T11:58:23.979634894Z" level=info msg="RemoveContainer for \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\" returns successfully" Jul 15 11:58:24.214000 audit[7344]: NETFILTER_CFG table=filter:171 family=2 entries=38 op=nft_register_rule pid=7344 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:24.214000 audit[7344]: SYSCALL arch=c000003e syscall=46 success=yes exit=14176 a0=3 a1=7ffda1640760 a2=0 a3=7ffda164074c items=0 ppid=2205 pid=7344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:24.214000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:24.229000 audit[7344]: NETFILTER_CFG table=nat:172 family=2 entries=34 op=nft_register_chain pid=7344 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:24.229000 audit[7344]: SYSCALL arch=c000003e syscall=46 success=yes exit=10596 a0=3 a1=7ffda1640760 a2=0 a3=7ffda164074c items=0 ppid=2205 pid=7344 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:24.229000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:24.679091 kubelet[2102]: I0715 11:58:24.676488 2102 reconciler_common.go:293] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/12ff45d2-4237-4a75-a49b-5d1934e0deb7-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 15 11:58:24.693717 kubelet[2102]: I0715 11:58:24.685065 2102 reconciler_common.go:293] "Volume detached for volume \"kube-api-access-v8pwz\" (UniqueName: \"kubernetes.io/projected/12ff45d2-4237-4a75-a49b-5d1934e0deb7-kube-api-access-v8pwz\") on node \"localhost\" DevicePath \"\"" Jul 15 11:58:24.722679 kubelet[2102]: I0715 11:58:24.722652 2102 scope.go:117] "RemoveContainer" containerID="0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a" Jul 15 11:58:24.802663 env[1245]: time="2025-07-15T11:58:24.802581854Z" level=error msg="ContainerStatus for \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\": not found" Jul 15 11:58:25.048000 audit[7350]: NETFILTER_CFG table=filter:173 family=2 entries=37 op=nft_register_rule pid=7350 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:25.048000 audit[7350]: SYSCALL arch=c000003e syscall=46 success=yes exit=13432 a0=3 a1=7ffc6e1b9b40 a2=0 a3=7ffc6e1b9b2c items=0 ppid=2205 pid=7350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:25.048000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:25.058000 audit[7350]: NETFILTER_CFG table=nat:174 family=2 entries=27 op=nft_register_chain pid=7350 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:25.058000 audit[7350]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7ffc6e1b9b40 a2=0 a3=0 items=0 ppid=2205 pid=7350 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:25.058000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:25.317737 kubelet[2102]: E0715 11:58:25.308653 2102 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\": not found" containerID="0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a" Jul 15 11:58:25.413015 systemd[1]: Removed slice kubepods-besteffort-pod12ff45d2_4237_4a75_a49b_5d1934e0deb7.slice. Jul 15 11:58:25.413084 systemd[1]: kubepods-besteffort-pod12ff45d2_4237_4a75_a49b_5d1934e0deb7.slice: Consumed 1.802s CPU time. Jul 15 11:58:25.435490 kubelet[2102]: I0715 11:58:25.432801 2102 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a"} err="failed to get container status \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\": rpc error: code = NotFound desc = an error occurred when try to find container \"0f58e0760ac77e9abbd50f1bbf28bf657009d8ff6842899a861c1fabb00edc6a\": not found" Jul 15 11:58:25.952000 audit[7352]: NETFILTER_CFG table=filter:175 family=2 entries=23 op=nft_register_rule pid=7352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:25.952000 audit[7352]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7fff8c973a20 a2=0 a3=7fff8c973a0c items=0 ppid=2205 pid=7352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:25.952000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:25.973000 audit[7352]: NETFILTER_CFG table=nat:176 family=2 entries=113 op=nft_register_chain pid=7352 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:25.973000 audit[7352]: SYSCALL arch=c000003e syscall=46 success=yes exit=53028 a0=3 a1=7fff8c973a20 a2=0 a3=7fff8c973a0c items=0 ppid=2205 pid=7352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:25.973000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:26.799447 kubelet[2102]: I0715 11:58:26.799404 2102 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="12ff45d2-4237-4a75-a49b-5d1934e0deb7" path="/var/lib/kubelet/pods/12ff45d2-4237-4a75-a49b-5d1934e0deb7/volumes" Jul 15 11:58:26.942648 systemd[1]: Started sshd@21-139.178.70.107:22-147.75.109.163:50118.service. Jul 15 11:58:26.942000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.107:22-147.75.109.163:50118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:27.075000 audit[7358]: NETFILTER_CFG table=filter:177 family=2 entries=9 op=nft_register_rule pid=7358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:27.079111 kernel: kauditd_printk_skb: 24 callbacks suppressed Jul 15 11:58:27.081541 kernel: audit: type=1325 audit(1752580707.075:1950): table=filter:177 family=2 entries=9 op=nft_register_rule pid=7358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:27.083027 kernel: audit: type=1300 audit(1752580707.075:1950): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffa57c3960 a2=0 a3=7fffa57c394c items=0 ppid=2205 pid=7358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:27.075000 audit[7358]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fffa57c3960 a2=0 a3=7fffa57c394c items=0 ppid=2205 pid=7358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:27.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:27.086802 kernel: audit: type=1327 audit(1752580707.075:1950): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:27.085000 audit[7358]: NETFILTER_CFG table=nat:178 family=2 entries=69 op=nft_register_chain pid=7358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:27.089227 kernel: audit: type=1325 audit(1752580707.085:1951): table=nat:178 family=2 entries=69 op=nft_register_chain pid=7358 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:58:27.085000 audit[7358]: SYSCALL arch=c000003e syscall=46 success=yes exit=24796 a0=3 a1=7fffa57c3960 a2=0 a3=7fffa57c394c items=0 ppid=2205 pid=7358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:27.093144 kernel: audit: type=1300 audit(1752580707.085:1951): arch=c000003e syscall=46 success=yes exit=24796 a0=3 a1=7fffa57c3960 a2=0 a3=7fffa57c394c items=0 ppid=2205 pid=7358 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:27.085000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:27.096453 kernel: audit: type=1327 audit(1752580707.085:1951): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:58:27.165000 audit[7355]: USER_ACCT pid=7355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:27.170078 sshd[7355]: Accepted publickey for core from 147.75.109.163 port 50118 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:58:27.171076 kernel: audit: type=1101 audit(1752580707.165:1952): pid=7355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:27.169000 audit[7355]: CRED_ACQ pid=7355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:27.174465 kernel: audit: type=1103 audit(1752580707.169:1953): pid=7355 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:27.175242 kernel: audit: type=1006 audit(1752580707.169:1954): pid=7355 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=23 res=1 Jul 15 11:58:27.169000 audit[7355]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee61ac160 a2=3 a3=0 items=0 ppid=1 pid=7355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:27.181189 kernel: audit: type=1300 audit(1752580707.169:1954): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffee61ac160 a2=3 a3=0 items=0 ppid=1 pid=7355 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:27.169000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:58:27.179755 sshd[7355]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:58:27.208291 systemd-logind[1237]: New session 23 of user core. Jul 15 11:58:27.211451 systemd[1]: Started session-23.scope. Jul 15 11:58:27.213000 audit[7355]: USER_START pid=7355 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:27.214000 audit[7359]: CRED_ACQ pid=7359 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:27.960733 sshd[7355]: pam_unix(sshd:session): session closed for user core Jul 15 11:58:27.965000 audit[7355]: USER_END pid=7355 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:27.965000 audit[7355]: CRED_DISP pid=7355 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:27.980000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.107:22-147.75.109.163:50118 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:27.980662 systemd[1]: sshd@21-139.178.70.107:22-147.75.109.163:50118.service: Deactivated successfully. Jul 15 11:58:27.985053 systemd[1]: session-23.scope: Deactivated successfully. Jul 15 11:58:27.985687 systemd-logind[1237]: Session 23 logged out. Waiting for processes to exit. Jul 15 11:58:27.987642 systemd-logind[1237]: Removed session 23. Jul 15 11:58:30.759491 systemd[1]: Started sshd@22-139.178.70.107:22-80.94.95.117:65105.service. Jul 15 11:58:30.759000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.107:22-80.94.95.117:65105 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:31.049852 sshd[7370]: kex_exchange_identification: Connection closed by remote host Jul 15 11:58:31.049852 sshd[7370]: Connection closed by 80.94.95.117 port 65105 Jul 15 11:58:31.053000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.107:22-80.94.95.117:65105 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:31.055110 systemd[1]: sshd@22-139.178.70.107:22-80.94.95.117:65105.service: Deactivated successfully. Jul 15 11:58:32.964000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.107:22-147.75.109.163:39910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:32.974371 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 15 11:58:32.989741 kernel: audit: type=1130 audit(1752580712.964:1962): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.107:22-147.75.109.163:39910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:32.966060 systemd[1]: Started sshd@23-139.178.70.107:22-147.75.109.163:39910.service. Jul 15 11:58:33.087759 sshd[7373]: Accepted publickey for core from 147.75.109.163 port 39910 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:58:33.086000 audit[7373]: USER_ACCT pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:33.106179 kernel: audit: type=1101 audit(1752580713.086:1963): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:33.106231 kernel: audit: type=1103 audit(1752580713.090:1964): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:33.106255 kernel: audit: type=1006 audit(1752580713.090:1965): pid=7373 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=24 res=1 Jul 15 11:58:33.106275 kernel: audit: type=1300 audit(1752580713.090:1965): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea3d653b0 a2=3 a3=0 items=0 ppid=1 pid=7373 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:33.106294 kernel: audit: type=1327 audit(1752580713.090:1965): proctitle=737368643A20636F7265205B707269765D Jul 15 11:58:33.090000 audit[7373]: CRED_ACQ pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:33.090000 audit[7373]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffea3d653b0 a2=3 a3=0 items=0 ppid=1 pid=7373 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:58:33.090000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:58:33.105002 sshd[7373]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:58:33.170215 systemd-logind[1237]: New session 24 of user core. Jul 15 11:58:33.173000 audit[7373]: USER_START pid=7373 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:33.171409 systemd[1]: Started session-24.scope. Jul 15 11:58:33.177000 audit[7375]: CRED_ACQ pid=7375 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:33.181840 kernel: audit: type=1105 audit(1752580713.173:1966): pid=7373 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:33.181889 kernel: audit: type=1103 audit(1752580713.177:1967): pid=7375 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:34.109000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:58:34.147234 kernel: audit: type=1400 audit(1752580714.109:1968): avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=7316 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:58:34.149896 kernel: audit: type=1400 audit(1752580714.109:1969): avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:58:34.109000 audit[6773]: AVC avc: denied { watch } for pid=6773 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=7322 scontext=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:58:34.109000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00293c000 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:58:34.109000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:58:34.109000 audit[6773]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0015abc00 a2=fc6 a3=0 items=0 ppid=1812 pid=6773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c218,c716 key=(null) Jul 15 11:58:34.109000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:58:35.104047 sshd[7373]: pam_unix(sshd:session): session closed for user core Jul 15 11:58:35.140000 audit[7373]: USER_END pid=7373 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:35.141000 audit[7373]: CRED_DISP pid=7373 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:58:35.167000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.107:22-147.75.109.163:39910 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:58:35.159328 systemd[1]: sshd@23-139.178.70.107:22-147.75.109.163:39910.service: Deactivated successfully. Jul 15 11:58:35.173386 systemd[1]: session-24.scope: Deactivated successfully. Jul 15 11:58:35.177814 systemd-logind[1237]: Session 24 logged out. Waiting for processes to exit. Jul 15 11:58:35.183427 systemd-logind[1237]: Removed session 24.