Jul 15 11:26:39.680028 kernel: Linux version 5.15.188-flatcar (build@pony-truck.infra.kinvolk.io) (x86_64-cros-linux-gnu-gcc (Gentoo Hardened 11.3.1_p20221209 p3) 11.3.1 20221209, GNU ld (Gentoo 2.39 p5) 2.39.0) #1 SMP Tue Jul 15 10:04:37 -00 2025 Jul 15 11:26:39.680044 kernel: Command line: BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:26:39.680050 kernel: Disabled fast string operations Jul 15 11:26:39.680054 kernel: BIOS-provided physical RAM map: Jul 15 11:26:39.680058 kernel: BIOS-e820: [mem 0x0000000000000000-0x000000000009ebff] usable Jul 15 11:26:39.680062 kernel: BIOS-e820: [mem 0x000000000009ec00-0x000000000009ffff] reserved Jul 15 11:26:39.680068 kernel: BIOS-e820: [mem 0x00000000000dc000-0x00000000000fffff] reserved Jul 15 11:26:39.680072 kernel: BIOS-e820: [mem 0x0000000000100000-0x000000007fedffff] usable Jul 15 11:26:39.680077 kernel: BIOS-e820: [mem 0x000000007fee0000-0x000000007fefefff] ACPI data Jul 15 11:26:39.680081 kernel: BIOS-e820: [mem 0x000000007feff000-0x000000007fefffff] ACPI NVS Jul 15 11:26:39.680085 kernel: BIOS-e820: [mem 0x000000007ff00000-0x000000007fffffff] usable Jul 15 11:26:39.680089 kernel: BIOS-e820: [mem 0x00000000f0000000-0x00000000f7ffffff] reserved Jul 15 11:26:39.680093 kernel: BIOS-e820: [mem 0x00000000fec00000-0x00000000fec0ffff] reserved Jul 15 11:26:39.680097 kernel: BIOS-e820: [mem 0x00000000fee00000-0x00000000fee00fff] reserved Jul 15 11:26:39.680103 kernel: BIOS-e820: [mem 0x00000000fffe0000-0x00000000ffffffff] reserved Jul 15 11:26:39.680108 kernel: NX (Execute Disable) protection: active Jul 15 11:26:39.680113 kernel: SMBIOS 2.7 present. Jul 15 11:26:39.680117 kernel: DMI: VMware, Inc. VMware Virtual Platform/440BX Desktop Reference Platform, BIOS 6.00 05/28/2020 Jul 15 11:26:39.680122 kernel: vmware: hypercall mode: 0x00 Jul 15 11:26:39.680126 kernel: Hypervisor detected: VMware Jul 15 11:26:39.680131 kernel: vmware: TSC freq read from hypervisor : 3408.000 MHz Jul 15 11:26:39.680136 kernel: vmware: Host bus clock speed read from hypervisor : 66000000 Hz Jul 15 11:26:39.680140 kernel: vmware: using clock offset of 4407268402 ns Jul 15 11:26:39.680145 kernel: tsc: Detected 3408.000 MHz processor Jul 15 11:26:39.680150 kernel: e820: update [mem 0x00000000-0x00000fff] usable ==> reserved Jul 15 11:26:39.680155 kernel: e820: remove [mem 0x000a0000-0x000fffff] usable Jul 15 11:26:39.680159 kernel: last_pfn = 0x80000 max_arch_pfn = 0x400000000 Jul 15 11:26:39.680164 kernel: x86/PAT: Configuration [0-7]: WB WC UC- UC WB WP UC- WT Jul 15 11:26:39.680169 kernel: total RAM covered: 3072M Jul 15 11:26:39.680174 kernel: Found optimal setting for mtrr clean up Jul 15 11:26:39.680179 kernel: gran_size: 64K chunk_size: 64K num_reg: 2 lose cover RAM: 0G Jul 15 11:26:39.680184 kernel: Using GB pages for direct mapping Jul 15 11:26:39.680188 kernel: ACPI: Early table checksum verification disabled Jul 15 11:26:39.680193 kernel: ACPI: RSDP 0x00000000000F6A00 000024 (v02 PTLTD ) Jul 15 11:26:39.680197 kernel: ACPI: XSDT 0x000000007FEE965B 00005C (v01 INTEL 440BX 06040000 VMW 01324272) Jul 15 11:26:39.680202 kernel: ACPI: FACP 0x000000007FEFEE73 0000F4 (v04 INTEL 440BX 06040000 PTL 000F4240) Jul 15 11:26:39.680207 kernel: ACPI: DSDT 0x000000007FEEAD55 01411E (v01 PTLTD Custom 06040000 MSFT 03000001) Jul 15 11:26:39.680211 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 15 11:26:39.680216 kernel: ACPI: FACS 0x000000007FEFFFC0 000040 Jul 15 11:26:39.680222 kernel: ACPI: BOOT 0x000000007FEEAD2D 000028 (v01 PTLTD $SBFTBL$ 06040000 LTP 00000001) Jul 15 11:26:39.680228 kernel: ACPI: APIC 0x000000007FEEA5EB 000742 (v01 PTLTD ? APIC 06040000 LTP 00000000) Jul 15 11:26:39.680233 kernel: ACPI: MCFG 0x000000007FEEA5AF 00003C (v01 PTLTD $PCITBL$ 06040000 LTP 00000001) Jul 15 11:26:39.680238 kernel: ACPI: SRAT 0x000000007FEE9757 0008A8 (v02 VMWARE MEMPLUG 06040000 VMW 00000001) Jul 15 11:26:39.680243 kernel: ACPI: HPET 0x000000007FEE971F 000038 (v01 VMWARE VMW HPET 06040000 VMW 00000001) Jul 15 11:26:39.680249 kernel: ACPI: WAET 0x000000007FEE96F7 000028 (v01 VMWARE VMW WAET 06040000 VMW 00000001) Jul 15 11:26:39.680254 kernel: ACPI: Reserving FACP table memory at [mem 0x7fefee73-0x7fefef66] Jul 15 11:26:39.680259 kernel: ACPI: Reserving DSDT table memory at [mem 0x7feead55-0x7fefee72] Jul 15 11:26:39.680264 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 15 11:26:39.680269 kernel: ACPI: Reserving FACS table memory at [mem 0x7fefffc0-0x7fefffff] Jul 15 11:26:39.680274 kernel: ACPI: Reserving BOOT table memory at [mem 0x7feead2d-0x7feead54] Jul 15 11:26:39.680279 kernel: ACPI: Reserving APIC table memory at [mem 0x7feea5eb-0x7feead2c] Jul 15 11:26:39.680284 kernel: ACPI: Reserving MCFG table memory at [mem 0x7feea5af-0x7feea5ea] Jul 15 11:26:39.680289 kernel: ACPI: Reserving SRAT table memory at [mem 0x7fee9757-0x7fee9ffe] Jul 15 11:26:39.680295 kernel: ACPI: Reserving HPET table memory at [mem 0x7fee971f-0x7fee9756] Jul 15 11:26:39.680300 kernel: ACPI: Reserving WAET table memory at [mem 0x7fee96f7-0x7fee971e] Jul 15 11:26:39.680305 kernel: system APIC only can use physical flat Jul 15 11:26:39.680309 kernel: Setting APIC routing to physical flat. Jul 15 11:26:39.680314 kernel: SRAT: PXM 0 -> APIC 0x00 -> Node 0 Jul 15 11:26:39.680319 kernel: SRAT: PXM 0 -> APIC 0x02 -> Node 0 Jul 15 11:26:39.680324 kernel: SRAT: PXM 0 -> APIC 0x04 -> Node 0 Jul 15 11:26:39.680329 kernel: SRAT: PXM 0 -> APIC 0x06 -> Node 0 Jul 15 11:26:39.680334 kernel: SRAT: PXM 0 -> APIC 0x08 -> Node 0 Jul 15 11:26:39.680340 kernel: SRAT: PXM 0 -> APIC 0x0a -> Node 0 Jul 15 11:26:39.680344 kernel: SRAT: PXM 0 -> APIC 0x0c -> Node 0 Jul 15 11:26:39.680349 kernel: SRAT: PXM 0 -> APIC 0x0e -> Node 0 Jul 15 11:26:39.680354 kernel: SRAT: PXM 0 -> APIC 0x10 -> Node 0 Jul 15 11:26:39.680359 kernel: SRAT: PXM 0 -> APIC 0x12 -> Node 0 Jul 15 11:26:39.680364 kernel: SRAT: PXM 0 -> APIC 0x14 -> Node 0 Jul 15 11:26:39.680368 kernel: SRAT: PXM 0 -> APIC 0x16 -> Node 0 Jul 15 11:26:39.680373 kernel: SRAT: PXM 0 -> APIC 0x18 -> Node 0 Jul 15 11:26:39.680378 kernel: SRAT: PXM 0 -> APIC 0x1a -> Node 0 Jul 15 11:26:39.680383 kernel: SRAT: PXM 0 -> APIC 0x1c -> Node 0 Jul 15 11:26:39.680389 kernel: SRAT: PXM 0 -> APIC 0x1e -> Node 0 Jul 15 11:26:39.680393 kernel: SRAT: PXM 0 -> APIC 0x20 -> Node 0 Jul 15 11:26:39.680398 kernel: SRAT: PXM 0 -> APIC 0x22 -> Node 0 Jul 15 11:26:39.680403 kernel: SRAT: PXM 0 -> APIC 0x24 -> Node 0 Jul 15 11:26:39.680408 kernel: SRAT: PXM 0 -> APIC 0x26 -> Node 0 Jul 15 11:26:39.680414 kernel: SRAT: PXM 0 -> APIC 0x28 -> Node 0 Jul 15 11:26:39.680421 kernel: SRAT: PXM 0 -> APIC 0x2a -> Node 0 Jul 15 11:26:39.680428 kernel: SRAT: PXM 0 -> APIC 0x2c -> Node 0 Jul 15 11:26:39.680433 kernel: SRAT: PXM 0 -> APIC 0x2e -> Node 0 Jul 15 11:26:39.680438 kernel: SRAT: PXM 0 -> APIC 0x30 -> Node 0 Jul 15 11:26:39.680444 kernel: SRAT: PXM 0 -> APIC 0x32 -> Node 0 Jul 15 11:26:39.680449 kernel: SRAT: PXM 0 -> APIC 0x34 -> Node 0 Jul 15 11:26:39.680454 kernel: SRAT: PXM 0 -> APIC 0x36 -> Node 0 Jul 15 11:26:39.680459 kernel: SRAT: PXM 0 -> APIC 0x38 -> Node 0 Jul 15 11:26:39.680464 kernel: SRAT: PXM 0 -> APIC 0x3a -> Node 0 Jul 15 11:26:39.680468 kernel: SRAT: PXM 0 -> APIC 0x3c -> Node 0 Jul 15 11:26:39.680473 kernel: SRAT: PXM 0 -> APIC 0x3e -> Node 0 Jul 15 11:26:39.680478 kernel: SRAT: PXM 0 -> APIC 0x40 -> Node 0 Jul 15 11:26:39.680483 kernel: SRAT: PXM 0 -> APIC 0x42 -> Node 0 Jul 15 11:26:39.680488 kernel: SRAT: PXM 0 -> APIC 0x44 -> Node 0 Jul 15 11:26:39.680493 kernel: SRAT: PXM 0 -> APIC 0x46 -> Node 0 Jul 15 11:26:39.680498 kernel: SRAT: PXM 0 -> APIC 0x48 -> Node 0 Jul 15 11:26:39.680503 kernel: SRAT: PXM 0 -> APIC 0x4a -> Node 0 Jul 15 11:26:39.680508 kernel: SRAT: PXM 0 -> APIC 0x4c -> Node 0 Jul 15 11:26:39.680512 kernel: SRAT: PXM 0 -> APIC 0x4e -> Node 0 Jul 15 11:26:39.680517 kernel: SRAT: PXM 0 -> APIC 0x50 -> Node 0 Jul 15 11:26:39.680522 kernel: SRAT: PXM 0 -> APIC 0x52 -> Node 0 Jul 15 11:26:39.680527 kernel: SRAT: PXM 0 -> APIC 0x54 -> Node 0 Jul 15 11:26:39.680532 kernel: SRAT: PXM 0 -> APIC 0x56 -> Node 0 Jul 15 11:26:39.680537 kernel: SRAT: PXM 0 -> APIC 0x58 -> Node 0 Jul 15 11:26:39.680542 kernel: SRAT: PXM 0 -> APIC 0x5a -> Node 0 Jul 15 11:26:39.680547 kernel: SRAT: PXM 0 -> APIC 0x5c -> Node 0 Jul 15 11:26:39.680552 kernel: SRAT: PXM 0 -> APIC 0x5e -> Node 0 Jul 15 11:26:39.680557 kernel: SRAT: PXM 0 -> APIC 0x60 -> Node 0 Jul 15 11:26:39.680568 kernel: SRAT: PXM 0 -> APIC 0x62 -> Node 0 Jul 15 11:26:39.680573 kernel: SRAT: PXM 0 -> APIC 0x64 -> Node 0 Jul 15 11:26:39.680577 kernel: SRAT: PXM 0 -> APIC 0x66 -> Node 0 Jul 15 11:26:39.680582 kernel: SRAT: PXM 0 -> APIC 0x68 -> Node 0 Jul 15 11:26:39.680587 kernel: SRAT: PXM 0 -> APIC 0x6a -> Node 0 Jul 15 11:26:39.680592 kernel: SRAT: PXM 0 -> APIC 0x6c -> Node 0 Jul 15 11:26:39.680598 kernel: SRAT: PXM 0 -> APIC 0x6e -> Node 0 Jul 15 11:26:39.680602 kernel: SRAT: PXM 0 -> APIC 0x70 -> Node 0 Jul 15 11:26:39.680607 kernel: SRAT: PXM 0 -> APIC 0x72 -> Node 0 Jul 15 11:26:39.680612 kernel: SRAT: PXM 0 -> APIC 0x74 -> Node 0 Jul 15 11:26:39.680617 kernel: SRAT: PXM 0 -> APIC 0x76 -> Node 0 Jul 15 11:26:39.680622 kernel: SRAT: PXM 0 -> APIC 0x78 -> Node 0 Jul 15 11:26:39.680631 kernel: SRAT: PXM 0 -> APIC 0x7a -> Node 0 Jul 15 11:26:39.680636 kernel: SRAT: PXM 0 -> APIC 0x7c -> Node 0 Jul 15 11:26:39.680642 kernel: SRAT: PXM 0 -> APIC 0x7e -> Node 0 Jul 15 11:26:39.680649 kernel: SRAT: PXM 0 -> APIC 0x80 -> Node 0 Jul 15 11:26:39.680655 kernel: SRAT: PXM 0 -> APIC 0x82 -> Node 0 Jul 15 11:26:39.680662 kernel: SRAT: PXM 0 -> APIC 0x84 -> Node 0 Jul 15 11:26:39.680667 kernel: SRAT: PXM 0 -> APIC 0x86 -> Node 0 Jul 15 11:26:39.680672 kernel: SRAT: PXM 0 -> APIC 0x88 -> Node 0 Jul 15 11:26:39.680677 kernel: SRAT: PXM 0 -> APIC 0x8a -> Node 0 Jul 15 11:26:39.680682 kernel: SRAT: PXM 0 -> APIC 0x8c -> Node 0 Jul 15 11:26:39.680687 kernel: SRAT: PXM 0 -> APIC 0x8e -> Node 0 Jul 15 11:26:39.680693 kernel: SRAT: PXM 0 -> APIC 0x90 -> Node 0 Jul 15 11:26:39.680699 kernel: SRAT: PXM 0 -> APIC 0x92 -> Node 0 Jul 15 11:26:39.680704 kernel: SRAT: PXM 0 -> APIC 0x94 -> Node 0 Jul 15 11:26:39.680709 kernel: SRAT: PXM 0 -> APIC 0x96 -> Node 0 Jul 15 11:26:39.680714 kernel: SRAT: PXM 0 -> APIC 0x98 -> Node 0 Jul 15 11:26:39.680719 kernel: SRAT: PXM 0 -> APIC 0x9a -> Node 0 Jul 15 11:26:39.680724 kernel: SRAT: PXM 0 -> APIC 0x9c -> Node 0 Jul 15 11:26:39.680730 kernel: SRAT: PXM 0 -> APIC 0x9e -> Node 0 Jul 15 11:26:39.680735 kernel: SRAT: PXM 0 -> APIC 0xa0 -> Node 0 Jul 15 11:26:39.680740 kernel: SRAT: PXM 0 -> APIC 0xa2 -> Node 0 Jul 15 11:26:39.680746 kernel: SRAT: PXM 0 -> APIC 0xa4 -> Node 0 Jul 15 11:26:39.680751 kernel: SRAT: PXM 0 -> APIC 0xa6 -> Node 0 Jul 15 11:26:39.680757 kernel: SRAT: PXM 0 -> APIC 0xa8 -> Node 0 Jul 15 11:26:39.680762 kernel: SRAT: PXM 0 -> APIC 0xaa -> Node 0 Jul 15 11:26:39.680767 kernel: SRAT: PXM 0 -> APIC 0xac -> Node 0 Jul 15 11:26:39.680772 kernel: SRAT: PXM 0 -> APIC 0xae -> Node 0 Jul 15 11:26:39.680778 kernel: SRAT: PXM 0 -> APIC 0xb0 -> Node 0 Jul 15 11:26:39.680783 kernel: SRAT: PXM 0 -> APIC 0xb2 -> Node 0 Jul 15 11:26:39.680788 kernel: SRAT: PXM 0 -> APIC 0xb4 -> Node 0 Jul 15 11:26:39.680793 kernel: SRAT: PXM 0 -> APIC 0xb6 -> Node 0 Jul 15 11:26:39.680799 kernel: SRAT: PXM 0 -> APIC 0xb8 -> Node 0 Jul 15 11:26:39.680804 kernel: SRAT: PXM 0 -> APIC 0xba -> Node 0 Jul 15 11:26:39.680809 kernel: SRAT: PXM 0 -> APIC 0xbc -> Node 0 Jul 15 11:26:39.680815 kernel: SRAT: PXM 0 -> APIC 0xbe -> Node 0 Jul 15 11:26:39.680820 kernel: SRAT: PXM 0 -> APIC 0xc0 -> Node 0 Jul 15 11:26:39.680825 kernel: SRAT: PXM 0 -> APIC 0xc2 -> Node 0 Jul 15 11:26:39.680830 kernel: SRAT: PXM 0 -> APIC 0xc4 -> Node 0 Jul 15 11:26:39.680835 kernel: SRAT: PXM 0 -> APIC 0xc6 -> Node 0 Jul 15 11:26:39.680841 kernel: SRAT: PXM 0 -> APIC 0xc8 -> Node 0 Jul 15 11:26:39.680846 kernel: SRAT: PXM 0 -> APIC 0xca -> Node 0 Jul 15 11:26:39.680852 kernel: SRAT: PXM 0 -> APIC 0xcc -> Node 0 Jul 15 11:26:39.680857 kernel: SRAT: PXM 0 -> APIC 0xce -> Node 0 Jul 15 11:26:39.680862 kernel: SRAT: PXM 0 -> APIC 0xd0 -> Node 0 Jul 15 11:26:39.680867 kernel: SRAT: PXM 0 -> APIC 0xd2 -> Node 0 Jul 15 11:26:39.680873 kernel: SRAT: PXM 0 -> APIC 0xd4 -> Node 0 Jul 15 11:26:39.680878 kernel: SRAT: PXM 0 -> APIC 0xd6 -> Node 0 Jul 15 11:26:39.680883 kernel: SRAT: PXM 0 -> APIC 0xd8 -> Node 0 Jul 15 11:26:39.680889 kernel: SRAT: PXM 0 -> APIC 0xda -> Node 0 Jul 15 11:26:39.680894 kernel: SRAT: PXM 0 -> APIC 0xdc -> Node 0 Jul 15 11:26:39.680899 kernel: SRAT: PXM 0 -> APIC 0xde -> Node 0 Jul 15 11:26:39.680906 kernel: SRAT: PXM 0 -> APIC 0xe0 -> Node 0 Jul 15 11:26:39.680911 kernel: SRAT: PXM 0 -> APIC 0xe2 -> Node 0 Jul 15 11:26:39.680916 kernel: SRAT: PXM 0 -> APIC 0xe4 -> Node 0 Jul 15 11:26:39.680921 kernel: SRAT: PXM 0 -> APIC 0xe6 -> Node 0 Jul 15 11:26:39.680926 kernel: SRAT: PXM 0 -> APIC 0xe8 -> Node 0 Jul 15 11:26:39.680931 kernel: SRAT: PXM 0 -> APIC 0xea -> Node 0 Jul 15 11:26:39.680937 kernel: SRAT: PXM 0 -> APIC 0xec -> Node 0 Jul 15 11:26:39.680942 kernel: SRAT: PXM 0 -> APIC 0xee -> Node 0 Jul 15 11:26:39.680947 kernel: SRAT: PXM 0 -> APIC 0xf0 -> Node 0 Jul 15 11:26:39.680952 kernel: SRAT: PXM 0 -> APIC 0xf2 -> Node 0 Jul 15 11:26:39.680959 kernel: SRAT: PXM 0 -> APIC 0xf4 -> Node 0 Jul 15 11:26:39.680964 kernel: SRAT: PXM 0 -> APIC 0xf6 -> Node 0 Jul 15 11:26:39.680969 kernel: SRAT: PXM 0 -> APIC 0xf8 -> Node 0 Jul 15 11:26:39.680974 kernel: SRAT: PXM 0 -> APIC 0xfa -> Node 0 Jul 15 11:26:39.682076 kernel: SRAT: PXM 0 -> APIC 0xfc -> Node 0 Jul 15 11:26:39.682084 kernel: SRAT: PXM 0 -> APIC 0xfe -> Node 0 Jul 15 11:26:39.682089 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00000000-0x0009ffff] Jul 15 11:26:39.682095 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x00100000-0x7fffffff] Jul 15 11:26:39.682101 kernel: ACPI: SRAT: Node 0 PXM 0 [mem 0x80000000-0xbfffffff] hotplug Jul 15 11:26:39.682109 kernel: NUMA: Node 0 [mem 0x00000000-0x0009ffff] + [mem 0x00100000-0x7fffffff] -> [mem 0x00000000-0x7fffffff] Jul 15 11:26:39.682114 kernel: NODE_DATA(0) allocated [mem 0x7fffa000-0x7fffffff] Jul 15 11:26:39.682120 kernel: Zone ranges: Jul 15 11:26:39.682126 kernel: DMA [mem 0x0000000000001000-0x0000000000ffffff] Jul 15 11:26:39.682131 kernel: DMA32 [mem 0x0000000001000000-0x000000007fffffff] Jul 15 11:26:39.682137 kernel: Normal empty Jul 15 11:26:39.682142 kernel: Movable zone start for each node Jul 15 11:26:39.682147 kernel: Early memory node ranges Jul 15 11:26:39.682152 kernel: node 0: [mem 0x0000000000001000-0x000000000009dfff] Jul 15 11:26:39.682158 kernel: node 0: [mem 0x0000000000100000-0x000000007fedffff] Jul 15 11:26:39.682164 kernel: node 0: [mem 0x000000007ff00000-0x000000007fffffff] Jul 15 11:26:39.682170 kernel: Initmem setup node 0 [mem 0x0000000000001000-0x000000007fffffff] Jul 15 11:26:39.682175 kernel: On node 0, zone DMA: 1 pages in unavailable ranges Jul 15 11:26:39.682181 kernel: On node 0, zone DMA: 98 pages in unavailable ranges Jul 15 11:26:39.682186 kernel: On node 0, zone DMA32: 32 pages in unavailable ranges Jul 15 11:26:39.682191 kernel: ACPI: PM-Timer IO Port: 0x1008 Jul 15 11:26:39.682197 kernel: system APIC only can use physical flat Jul 15 11:26:39.682202 kernel: ACPI: LAPIC_NMI (acpi_id[0x00] high edge lint[0x1]) Jul 15 11:26:39.682208 kernel: ACPI: LAPIC_NMI (acpi_id[0x01] high edge lint[0x1]) Jul 15 11:26:39.682214 kernel: ACPI: LAPIC_NMI (acpi_id[0x02] high edge lint[0x1]) Jul 15 11:26:39.682219 kernel: ACPI: LAPIC_NMI (acpi_id[0x03] high edge lint[0x1]) Jul 15 11:26:39.682224 kernel: ACPI: LAPIC_NMI (acpi_id[0x04] high edge lint[0x1]) Jul 15 11:26:39.682230 kernel: ACPI: LAPIC_NMI (acpi_id[0x05] high edge lint[0x1]) Jul 15 11:26:39.682235 kernel: ACPI: LAPIC_NMI (acpi_id[0x06] high edge lint[0x1]) Jul 15 11:26:39.682240 kernel: ACPI: LAPIC_NMI (acpi_id[0x07] high edge lint[0x1]) Jul 15 11:26:39.682246 kernel: ACPI: LAPIC_NMI (acpi_id[0x08] high edge lint[0x1]) Jul 15 11:26:39.682251 kernel: ACPI: LAPIC_NMI (acpi_id[0x09] high edge lint[0x1]) Jul 15 11:26:39.682258 kernel: ACPI: LAPIC_NMI (acpi_id[0x0a] high edge lint[0x1]) Jul 15 11:26:39.682266 kernel: ACPI: LAPIC_NMI (acpi_id[0x0b] high edge lint[0x1]) Jul 15 11:26:39.682276 kernel: ACPI: LAPIC_NMI (acpi_id[0x0c] high edge lint[0x1]) Jul 15 11:26:39.682284 kernel: ACPI: LAPIC_NMI (acpi_id[0x0d] high edge lint[0x1]) Jul 15 11:26:39.682289 kernel: ACPI: LAPIC_NMI (acpi_id[0x0e] high edge lint[0x1]) Jul 15 11:26:39.682295 kernel: ACPI: LAPIC_NMI (acpi_id[0x0f] high edge lint[0x1]) Jul 15 11:26:39.682300 kernel: ACPI: LAPIC_NMI (acpi_id[0x10] high edge lint[0x1]) Jul 15 11:26:39.682305 kernel: ACPI: LAPIC_NMI (acpi_id[0x11] high edge lint[0x1]) Jul 15 11:26:39.682310 kernel: ACPI: LAPIC_NMI (acpi_id[0x12] high edge lint[0x1]) Jul 15 11:26:39.682316 kernel: ACPI: LAPIC_NMI (acpi_id[0x13] high edge lint[0x1]) Jul 15 11:26:39.682321 kernel: ACPI: LAPIC_NMI (acpi_id[0x14] high edge lint[0x1]) Jul 15 11:26:39.682327 kernel: ACPI: LAPIC_NMI (acpi_id[0x15] high edge lint[0x1]) Jul 15 11:26:39.682333 kernel: ACPI: LAPIC_NMI (acpi_id[0x16] high edge lint[0x1]) Jul 15 11:26:39.682338 kernel: ACPI: LAPIC_NMI (acpi_id[0x17] high edge lint[0x1]) Jul 15 11:26:39.682343 kernel: ACPI: LAPIC_NMI (acpi_id[0x18] high edge lint[0x1]) Jul 15 11:26:39.682349 kernel: ACPI: LAPIC_NMI (acpi_id[0x19] high edge lint[0x1]) Jul 15 11:26:39.682354 kernel: ACPI: LAPIC_NMI (acpi_id[0x1a] high edge lint[0x1]) Jul 15 11:26:39.682359 kernel: ACPI: LAPIC_NMI (acpi_id[0x1b] high edge lint[0x1]) Jul 15 11:26:39.682365 kernel: ACPI: LAPIC_NMI (acpi_id[0x1c] high edge lint[0x1]) Jul 15 11:26:39.682370 kernel: ACPI: LAPIC_NMI (acpi_id[0x1d] high edge lint[0x1]) Jul 15 11:26:39.682376 kernel: ACPI: LAPIC_NMI (acpi_id[0x1e] high edge lint[0x1]) Jul 15 11:26:39.682382 kernel: ACPI: LAPIC_NMI (acpi_id[0x1f] high edge lint[0x1]) Jul 15 11:26:39.682387 kernel: ACPI: LAPIC_NMI (acpi_id[0x20] high edge lint[0x1]) Jul 15 11:26:39.682393 kernel: ACPI: LAPIC_NMI (acpi_id[0x21] high edge lint[0x1]) Jul 15 11:26:39.682398 kernel: ACPI: LAPIC_NMI (acpi_id[0x22] high edge lint[0x1]) Jul 15 11:26:39.682403 kernel: ACPI: LAPIC_NMI (acpi_id[0x23] high edge lint[0x1]) Jul 15 11:26:39.682409 kernel: ACPI: LAPIC_NMI (acpi_id[0x24] high edge lint[0x1]) Jul 15 11:26:39.682414 kernel: ACPI: LAPIC_NMI (acpi_id[0x25] high edge lint[0x1]) Jul 15 11:26:39.682419 kernel: ACPI: LAPIC_NMI (acpi_id[0x26] high edge lint[0x1]) Jul 15 11:26:39.682425 kernel: ACPI: LAPIC_NMI (acpi_id[0x27] high edge lint[0x1]) Jul 15 11:26:39.682431 kernel: ACPI: LAPIC_NMI (acpi_id[0x28] high edge lint[0x1]) Jul 15 11:26:39.682437 kernel: ACPI: LAPIC_NMI (acpi_id[0x29] high edge lint[0x1]) Jul 15 11:26:39.682442 kernel: ACPI: LAPIC_NMI (acpi_id[0x2a] high edge lint[0x1]) Jul 15 11:26:39.682447 kernel: ACPI: LAPIC_NMI (acpi_id[0x2b] high edge lint[0x1]) Jul 15 11:26:39.682452 kernel: ACPI: LAPIC_NMI (acpi_id[0x2c] high edge lint[0x1]) Jul 15 11:26:39.682458 kernel: ACPI: LAPIC_NMI (acpi_id[0x2d] high edge lint[0x1]) Jul 15 11:26:39.682463 kernel: ACPI: LAPIC_NMI (acpi_id[0x2e] high edge lint[0x1]) Jul 15 11:26:39.682468 kernel: ACPI: LAPIC_NMI (acpi_id[0x2f] high edge lint[0x1]) Jul 15 11:26:39.682474 kernel: ACPI: LAPIC_NMI (acpi_id[0x30] high edge lint[0x1]) Jul 15 11:26:39.682480 kernel: ACPI: LAPIC_NMI (acpi_id[0x31] high edge lint[0x1]) Jul 15 11:26:39.682489 kernel: ACPI: LAPIC_NMI (acpi_id[0x32] high edge lint[0x1]) Jul 15 11:26:39.682494 kernel: ACPI: LAPIC_NMI (acpi_id[0x33] high edge lint[0x1]) Jul 15 11:26:39.682499 kernel: ACPI: LAPIC_NMI (acpi_id[0x34] high edge lint[0x1]) Jul 15 11:26:39.682505 kernel: ACPI: LAPIC_NMI (acpi_id[0x35] high edge lint[0x1]) Jul 15 11:26:39.682510 kernel: ACPI: LAPIC_NMI (acpi_id[0x36] high edge lint[0x1]) Jul 15 11:26:39.682515 kernel: ACPI: LAPIC_NMI (acpi_id[0x37] high edge lint[0x1]) Jul 15 11:26:39.682520 kernel: ACPI: LAPIC_NMI (acpi_id[0x38] high edge lint[0x1]) Jul 15 11:26:39.682525 kernel: ACPI: LAPIC_NMI (acpi_id[0x39] high edge lint[0x1]) Jul 15 11:26:39.682531 kernel: ACPI: LAPIC_NMI (acpi_id[0x3a] high edge lint[0x1]) Jul 15 11:26:39.682537 kernel: ACPI: LAPIC_NMI (acpi_id[0x3b] high edge lint[0x1]) Jul 15 11:26:39.682542 kernel: ACPI: LAPIC_NMI (acpi_id[0x3c] high edge lint[0x1]) Jul 15 11:26:39.682548 kernel: ACPI: LAPIC_NMI (acpi_id[0x3d] high edge lint[0x1]) Jul 15 11:26:39.682553 kernel: ACPI: LAPIC_NMI (acpi_id[0x3e] high edge lint[0x1]) Jul 15 11:26:39.682558 kernel: ACPI: LAPIC_NMI (acpi_id[0x3f] high edge lint[0x1]) Jul 15 11:26:39.682575 kernel: ACPI: LAPIC_NMI (acpi_id[0x40] high edge lint[0x1]) Jul 15 11:26:39.682581 kernel: ACPI: LAPIC_NMI (acpi_id[0x41] high edge lint[0x1]) Jul 15 11:26:39.682587 kernel: ACPI: LAPIC_NMI (acpi_id[0x42] high edge lint[0x1]) Jul 15 11:26:39.682592 kernel: ACPI: LAPIC_NMI (acpi_id[0x43] high edge lint[0x1]) Jul 15 11:26:39.682597 kernel: ACPI: LAPIC_NMI (acpi_id[0x44] high edge lint[0x1]) Jul 15 11:26:39.682604 kernel: ACPI: LAPIC_NMI (acpi_id[0x45] high edge lint[0x1]) Jul 15 11:26:39.682609 kernel: ACPI: LAPIC_NMI (acpi_id[0x46] high edge lint[0x1]) Jul 15 11:26:39.682615 kernel: ACPI: LAPIC_NMI (acpi_id[0x47] high edge lint[0x1]) Jul 15 11:26:39.682620 kernel: ACPI: LAPIC_NMI (acpi_id[0x48] high edge lint[0x1]) Jul 15 11:26:39.682625 kernel: ACPI: LAPIC_NMI (acpi_id[0x49] high edge lint[0x1]) Jul 15 11:26:39.682630 kernel: ACPI: LAPIC_NMI (acpi_id[0x4a] high edge lint[0x1]) Jul 15 11:26:39.682636 kernel: ACPI: LAPIC_NMI (acpi_id[0x4b] high edge lint[0x1]) Jul 15 11:26:39.682641 kernel: ACPI: LAPIC_NMI (acpi_id[0x4c] high edge lint[0x1]) Jul 15 11:26:39.682646 kernel: ACPI: LAPIC_NMI (acpi_id[0x4d] high edge lint[0x1]) Jul 15 11:26:39.682652 kernel: ACPI: LAPIC_NMI (acpi_id[0x4e] high edge lint[0x1]) Jul 15 11:26:39.682658 kernel: ACPI: LAPIC_NMI (acpi_id[0x4f] high edge lint[0x1]) Jul 15 11:26:39.682663 kernel: ACPI: LAPIC_NMI (acpi_id[0x50] high edge lint[0x1]) Jul 15 11:26:39.682668 kernel: ACPI: LAPIC_NMI (acpi_id[0x51] high edge lint[0x1]) Jul 15 11:26:39.682673 kernel: ACPI: LAPIC_NMI (acpi_id[0x52] high edge lint[0x1]) Jul 15 11:26:39.682678 kernel: ACPI: LAPIC_NMI (acpi_id[0x53] high edge lint[0x1]) Jul 15 11:26:39.682684 kernel: ACPI: LAPIC_NMI (acpi_id[0x54] high edge lint[0x1]) Jul 15 11:26:39.682692 kernel: ACPI: LAPIC_NMI (acpi_id[0x55] high edge lint[0x1]) Jul 15 11:26:39.682697 kernel: ACPI: LAPIC_NMI (acpi_id[0x56] high edge lint[0x1]) Jul 15 11:26:39.682704 kernel: ACPI: LAPIC_NMI (acpi_id[0x57] high edge lint[0x1]) Jul 15 11:26:39.682709 kernel: ACPI: LAPIC_NMI (acpi_id[0x58] high edge lint[0x1]) Jul 15 11:26:39.682715 kernel: ACPI: LAPIC_NMI (acpi_id[0x59] high edge lint[0x1]) Jul 15 11:26:39.682720 kernel: ACPI: LAPIC_NMI (acpi_id[0x5a] high edge lint[0x1]) Jul 15 11:26:39.682726 kernel: ACPI: LAPIC_NMI (acpi_id[0x5b] high edge lint[0x1]) Jul 15 11:26:39.682731 kernel: ACPI: LAPIC_NMI (acpi_id[0x5c] high edge lint[0x1]) Jul 15 11:26:39.682736 kernel: ACPI: LAPIC_NMI (acpi_id[0x5d] high edge lint[0x1]) Jul 15 11:26:39.682741 kernel: ACPI: LAPIC_NMI (acpi_id[0x5e] high edge lint[0x1]) Jul 15 11:26:39.682746 kernel: ACPI: LAPIC_NMI (acpi_id[0x5f] high edge lint[0x1]) Jul 15 11:26:39.682752 kernel: ACPI: LAPIC_NMI (acpi_id[0x60] high edge lint[0x1]) Jul 15 11:26:39.682758 kernel: ACPI: LAPIC_NMI (acpi_id[0x61] high edge lint[0x1]) Jul 15 11:26:39.682763 kernel: ACPI: LAPIC_NMI (acpi_id[0x62] high edge lint[0x1]) Jul 15 11:26:39.682768 kernel: ACPI: LAPIC_NMI (acpi_id[0x63] high edge lint[0x1]) Jul 15 11:26:39.682774 kernel: ACPI: LAPIC_NMI (acpi_id[0x64] high edge lint[0x1]) Jul 15 11:26:39.682779 kernel: ACPI: LAPIC_NMI (acpi_id[0x65] high edge lint[0x1]) Jul 15 11:26:39.682784 kernel: ACPI: LAPIC_NMI (acpi_id[0x66] high edge lint[0x1]) Jul 15 11:26:39.682789 kernel: ACPI: LAPIC_NMI (acpi_id[0x67] high edge lint[0x1]) Jul 15 11:26:39.682794 kernel: ACPI: LAPIC_NMI (acpi_id[0x68] high edge lint[0x1]) Jul 15 11:26:39.682800 kernel: ACPI: LAPIC_NMI (acpi_id[0x69] high edge lint[0x1]) Jul 15 11:26:39.682806 kernel: ACPI: LAPIC_NMI (acpi_id[0x6a] high edge lint[0x1]) Jul 15 11:26:39.682811 kernel: ACPI: LAPIC_NMI (acpi_id[0x6b] high edge lint[0x1]) Jul 15 11:26:39.682817 kernel: ACPI: LAPIC_NMI (acpi_id[0x6c] high edge lint[0x1]) Jul 15 11:26:39.682822 kernel: ACPI: LAPIC_NMI (acpi_id[0x6d] high edge lint[0x1]) Jul 15 11:26:39.682828 kernel: ACPI: LAPIC_NMI (acpi_id[0x6e] high edge lint[0x1]) Jul 15 11:26:39.682833 kernel: ACPI: LAPIC_NMI (acpi_id[0x6f] high edge lint[0x1]) Jul 15 11:26:39.682838 kernel: ACPI: LAPIC_NMI (acpi_id[0x70] high edge lint[0x1]) Jul 15 11:26:39.682844 kernel: ACPI: LAPIC_NMI (acpi_id[0x71] high edge lint[0x1]) Jul 15 11:26:39.682849 kernel: ACPI: LAPIC_NMI (acpi_id[0x72] high edge lint[0x1]) Jul 15 11:26:39.682854 kernel: ACPI: LAPIC_NMI (acpi_id[0x73] high edge lint[0x1]) Jul 15 11:26:39.682860 kernel: ACPI: LAPIC_NMI (acpi_id[0x74] high edge lint[0x1]) Jul 15 11:26:39.682866 kernel: ACPI: LAPIC_NMI (acpi_id[0x75] high edge lint[0x1]) Jul 15 11:26:39.682871 kernel: ACPI: LAPIC_NMI (acpi_id[0x76] high edge lint[0x1]) Jul 15 11:26:39.682876 kernel: ACPI: LAPIC_NMI (acpi_id[0x77] high edge lint[0x1]) Jul 15 11:26:39.682882 kernel: ACPI: LAPIC_NMI (acpi_id[0x78] high edge lint[0x1]) Jul 15 11:26:39.682887 kernel: ACPI: LAPIC_NMI (acpi_id[0x79] high edge lint[0x1]) Jul 15 11:26:39.682893 kernel: ACPI: LAPIC_NMI (acpi_id[0x7a] high edge lint[0x1]) Jul 15 11:26:39.682898 kernel: ACPI: LAPIC_NMI (acpi_id[0x7b] high edge lint[0x1]) Jul 15 11:26:39.682903 kernel: ACPI: LAPIC_NMI (acpi_id[0x7c] high edge lint[0x1]) Jul 15 11:26:39.682909 kernel: ACPI: LAPIC_NMI (acpi_id[0x7d] high edge lint[0x1]) Jul 15 11:26:39.682915 kernel: ACPI: LAPIC_NMI (acpi_id[0x7e] high edge lint[0x1]) Jul 15 11:26:39.682920 kernel: ACPI: LAPIC_NMI (acpi_id[0x7f] high edge lint[0x1]) Jul 15 11:26:39.682925 kernel: IOAPIC[0]: apic_id 1, version 17, address 0xfec00000, GSI 0-23 Jul 15 11:26:39.682931 kernel: ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 high edge) Jul 15 11:26:39.682936 kernel: ACPI: Using ACPI (MADT) for SMP configuration information Jul 15 11:26:39.682941 kernel: ACPI: HPET id: 0x8086af01 base: 0xfed00000 Jul 15 11:26:39.682946 kernel: TSC deadline timer available Jul 15 11:26:39.682952 kernel: smpboot: Allowing 128 CPUs, 126 hotplug CPUs Jul 15 11:26:39.682958 kernel: [mem 0x80000000-0xefffffff] available for PCI devices Jul 15 11:26:39.682964 kernel: Booting paravirtualized kernel on VMware hypervisor Jul 15 11:26:39.682969 kernel: clocksource: refined-jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1910969940391419 ns Jul 15 11:26:39.682975 kernel: setup_percpu: NR_CPUS:512 nr_cpumask_bits:512 nr_cpu_ids:128 nr_node_ids:1 Jul 15 11:26:39.682980 kernel: percpu: Embedded 56 pages/cpu s188696 r8192 d32488 u262144 Jul 15 11:26:39.682986 kernel: pcpu-alloc: s188696 r8192 d32488 u262144 alloc=1*2097152 Jul 15 11:26:39.682991 kernel: pcpu-alloc: [0] 000 001 002 003 004 005 006 007 Jul 15 11:26:39.682996 kernel: pcpu-alloc: [0] 008 009 010 011 012 013 014 015 Jul 15 11:26:39.683001 kernel: pcpu-alloc: [0] 016 017 018 019 020 021 022 023 Jul 15 11:26:39.683007 kernel: pcpu-alloc: [0] 024 025 026 027 028 029 030 031 Jul 15 11:26:39.683013 kernel: pcpu-alloc: [0] 032 033 034 035 036 037 038 039 Jul 15 11:26:39.683018 kernel: pcpu-alloc: [0] 040 041 042 043 044 045 046 047 Jul 15 11:26:39.683023 kernel: pcpu-alloc: [0] 048 049 050 051 052 053 054 055 Jul 15 11:26:39.683036 kernel: pcpu-alloc: [0] 056 057 058 059 060 061 062 063 Jul 15 11:26:39.683042 kernel: pcpu-alloc: [0] 064 065 066 067 068 069 070 071 Jul 15 11:26:39.683048 kernel: pcpu-alloc: [0] 072 073 074 075 076 077 078 079 Jul 15 11:26:39.683053 kernel: pcpu-alloc: [0] 080 081 082 083 084 085 086 087 Jul 15 11:26:39.683059 kernel: pcpu-alloc: [0] 088 089 090 091 092 093 094 095 Jul 15 11:26:39.683065 kernel: pcpu-alloc: [0] 096 097 098 099 100 101 102 103 Jul 15 11:26:39.683071 kernel: pcpu-alloc: [0] 104 105 106 107 108 109 110 111 Jul 15 11:26:39.683076 kernel: pcpu-alloc: [0] 112 113 114 115 116 117 118 119 Jul 15 11:26:39.683083 kernel: pcpu-alloc: [0] 120 121 122 123 124 125 126 127 Jul 15 11:26:39.683088 kernel: Built 1 zonelists, mobility grouping on. Total pages: 515808 Jul 15 11:26:39.683094 kernel: Policy zone: DMA32 Jul 15 11:26:39.683100 kernel: Kernel command line: rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LABEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:26:39.683106 kernel: Unknown kernel command line parameters "BOOT_IMAGE=/flatcar/vmlinuz-a", will be passed to user space. Jul 15 11:26:39.683113 kernel: printk: log_buf_len individual max cpu contribution: 4096 bytes Jul 15 11:26:39.683119 kernel: printk: log_buf_len total cpu_extra contributions: 520192 bytes Jul 15 11:26:39.683124 kernel: printk: log_buf_len min size: 262144 bytes Jul 15 11:26:39.683130 kernel: printk: log_buf_len: 1048576 bytes Jul 15 11:26:39.683136 kernel: printk: early log buf free: 239728(91%) Jul 15 11:26:39.683141 kernel: Dentry cache hash table entries: 262144 (order: 9, 2097152 bytes, linear) Jul 15 11:26:39.683147 kernel: Inode-cache hash table entries: 131072 (order: 8, 1048576 bytes, linear) Jul 15 11:26:39.683156 kernel: mem auto-init: stack:off, heap alloc:off, heap free:off Jul 15 11:26:39.683162 kernel: Memory: 1940392K/2096628K available (12295K kernel code, 2276K rwdata, 13732K rodata, 47476K init, 4104K bss, 155976K reserved, 0K cma-reserved) Jul 15 11:26:39.683169 kernel: SLUB: HWalign=64, Order=0-3, MinObjects=0, CPUs=128, Nodes=1 Jul 15 11:26:39.683175 kernel: ftrace: allocating 34607 entries in 136 pages Jul 15 11:26:39.683181 kernel: ftrace: allocated 136 pages with 2 groups Jul 15 11:26:39.683188 kernel: rcu: Hierarchical RCU implementation. Jul 15 11:26:39.683194 kernel: rcu: RCU event tracing is enabled. Jul 15 11:26:39.683201 kernel: rcu: RCU restricting CPUs from NR_CPUS=512 to nr_cpu_ids=128. Jul 15 11:26:39.683207 kernel: Rude variant of Tasks RCU enabled. Jul 15 11:26:39.683212 kernel: Tracing variant of Tasks RCU enabled. Jul 15 11:26:39.683218 kernel: rcu: RCU calculated value of scheduler-enlistment delay is 100 jiffies. Jul 15 11:26:39.683224 kernel: rcu: Adjusting geometry for rcu_fanout_leaf=16, nr_cpu_ids=128 Jul 15 11:26:39.683230 kernel: NR_IRQS: 33024, nr_irqs: 1448, preallocated irqs: 16 Jul 15 11:26:39.683236 kernel: random: crng init done Jul 15 11:26:39.683241 kernel: Console: colour VGA+ 80x25 Jul 15 11:26:39.683247 kernel: printk: console [tty0] enabled Jul 15 11:26:39.683253 kernel: printk: console [ttyS0] enabled Jul 15 11:26:39.683260 kernel: ACPI: Core revision 20210730 Jul 15 11:26:39.683266 kernel: clocksource: hpet: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 133484882848 ns Jul 15 11:26:39.683271 kernel: APIC: Switch to symmetric I/O mode setup Jul 15 11:26:39.683277 kernel: x2apic enabled Jul 15 11:26:39.683283 kernel: Switched APIC routing to physical x2apic. Jul 15 11:26:39.683288 kernel: ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 Jul 15 11:26:39.683294 kernel: clocksource: tsc-early: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 15 11:26:39.683300 kernel: Calibrating delay loop (skipped) preset value.. 6816.00 BogoMIPS (lpj=3408000) Jul 15 11:26:39.683306 kernel: Disabled fast string operations Jul 15 11:26:39.683312 kernel: Last level iTLB entries: 4KB 64, 2MB 8, 4MB 8 Jul 15 11:26:39.683318 kernel: Last level dTLB entries: 4KB 64, 2MB 32, 4MB 32, 1GB 4 Jul 15 11:26:39.683324 kernel: Spectre V1 : Mitigation: usercopy/swapgs barriers and __user pointer sanitization Jul 15 11:26:39.683330 kernel: Spectre V2 : WARNING: Unprivileged eBPF is enabled with eIBRS on, data leaks possible via Spectre v2 BHB attacks! Jul 15 11:26:39.683336 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on vm exit Jul 15 11:26:39.683342 kernel: Spectre V2 : Spectre BHI mitigation: SW BHB clearing on syscall Jul 15 11:26:39.683347 kernel: Spectre V2 : Mitigation: Enhanced / Automatic IBRS Jul 15 11:26:39.683353 kernel: Spectre V2 : Spectre v2 / PBRSB-eIBRS: Retire a single CALL on VMEXIT Jul 15 11:26:39.683359 kernel: RETBleed: Mitigation: Enhanced IBRS Jul 15 11:26:39.683365 kernel: Spectre V2 : mitigation: Enabling conditional Indirect Branch Prediction Barrier Jul 15 11:26:39.683371 kernel: Speculative Store Bypass: Mitigation: Speculative Store Bypass disabled via prctl and seccomp Jul 15 11:26:39.683377 kernel: MMIO Stale Data: Vulnerable: Clear CPU buffers attempted, no microcode Jul 15 11:26:39.683382 kernel: SRBDS: Unknown: Dependent on hypervisor status Jul 15 11:26:39.683388 kernel: GDS: Unknown: Dependent on hypervisor status Jul 15 11:26:39.683394 kernel: ITS: Mitigation: Aligned branch/return thunks Jul 15 11:26:39.683400 kernel: x86/fpu: Supporting XSAVE feature 0x001: 'x87 floating point registers' Jul 15 11:26:39.683406 kernel: x86/fpu: Supporting XSAVE feature 0x002: 'SSE registers' Jul 15 11:26:39.683412 kernel: x86/fpu: Supporting XSAVE feature 0x004: 'AVX registers' Jul 15 11:26:39.683418 kernel: x86/fpu: xstate_offset[2]: 576, xstate_sizes[2]: 256 Jul 15 11:26:39.683424 kernel: x86/fpu: Enabled xstate features 0x7, context size is 832 bytes, using 'compacted' format. Jul 15 11:26:39.683430 kernel: Freeing SMP alternatives memory: 32K Jul 15 11:26:39.683437 kernel: pid_max: default: 131072 minimum: 1024 Jul 15 11:26:39.683444 kernel: LSM: Security Framework initializing Jul 15 11:26:39.683450 kernel: SELinux: Initializing. Jul 15 11:26:39.683456 kernel: Mount-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 15 11:26:39.683462 kernel: Mountpoint-cache hash table entries: 4096 (order: 3, 32768 bytes, linear) Jul 15 11:26:39.683469 kernel: smpboot: CPU0: Intel(R) Xeon(R) E-2278G CPU @ 3.40GHz (family: 0x6, model: 0x9e, stepping: 0xd) Jul 15 11:26:39.683475 kernel: Performance Events: Skylake events, core PMU driver. Jul 15 11:26:39.683481 kernel: core: CPUID marked event: 'cpu cycles' unavailable Jul 15 11:26:39.683488 kernel: core: CPUID marked event: 'instructions' unavailable Jul 15 11:26:39.683494 kernel: core: CPUID marked event: 'bus cycles' unavailable Jul 15 11:26:39.683499 kernel: core: CPUID marked event: 'cache references' unavailable Jul 15 11:26:39.683505 kernel: core: CPUID marked event: 'cache misses' unavailable Jul 15 11:26:39.683511 kernel: core: CPUID marked event: 'branch instructions' unavailable Jul 15 11:26:39.683516 kernel: core: CPUID marked event: 'branch misses' unavailable Jul 15 11:26:39.683523 kernel: ... version: 1 Jul 15 11:26:39.683529 kernel: ... bit width: 48 Jul 15 11:26:39.683535 kernel: ... generic registers: 4 Jul 15 11:26:39.683541 kernel: ... value mask: 0000ffffffffffff Jul 15 11:26:39.683547 kernel: ... max period: 000000007fffffff Jul 15 11:26:39.683552 kernel: ... fixed-purpose events: 0 Jul 15 11:26:39.683558 kernel: ... event mask: 000000000000000f Jul 15 11:26:39.683571 kernel: signal: max sigframe size: 1776 Jul 15 11:26:39.683578 kernel: rcu: Hierarchical SRCU implementation. Jul 15 11:26:39.683585 kernel: NMI watchdog: Perf NMI watchdog permanently disabled Jul 15 11:26:39.683591 kernel: smp: Bringing up secondary CPUs ... Jul 15 11:26:39.683597 kernel: x86: Booting SMP configuration: Jul 15 11:26:39.683603 kernel: .... node #0, CPUs: #1 Jul 15 11:26:39.683609 kernel: Disabled fast string operations Jul 15 11:26:39.683614 kernel: smpboot: CPU 1 Converting physical 2 to logical package 1 Jul 15 11:26:39.683620 kernel: smpboot: CPU 1 Converting physical 0 to logical die 1 Jul 15 11:26:39.683625 kernel: smp: Brought up 1 node, 2 CPUs Jul 15 11:26:39.683631 kernel: smpboot: Max logical packages: 128 Jul 15 11:26:39.683637 kernel: smpboot: Total of 2 processors activated (13632.00 BogoMIPS) Jul 15 11:26:39.683644 kernel: devtmpfs: initialized Jul 15 11:26:39.683650 kernel: x86/mm: Memory block size: 128MB Jul 15 11:26:39.683656 kernel: ACPI: PM: Registering ACPI NVS region [mem 0x7feff000-0x7fefffff] (4096 bytes) Jul 15 11:26:39.683661 kernel: clocksource: jiffies: mask: 0xffffffff max_cycles: 0xffffffff, max_idle_ns: 1911260446275000 ns Jul 15 11:26:39.683667 kernel: futex hash table entries: 32768 (order: 9, 2097152 bytes, linear) Jul 15 11:26:39.683673 kernel: pinctrl core: initialized pinctrl subsystem Jul 15 11:26:39.683678 kernel: NET: Registered PF_NETLINK/PF_ROUTE protocol family Jul 15 11:26:39.683684 kernel: audit: initializing netlink subsys (disabled) Jul 15 11:26:39.683690 kernel: audit: type=2000 audit(1752578798.087:1): state=initialized audit_enabled=0 res=1 Jul 15 11:26:39.683697 kernel: thermal_sys: Registered thermal governor 'step_wise' Jul 15 11:26:39.683702 kernel: thermal_sys: Registered thermal governor 'user_space' Jul 15 11:26:39.683708 kernel: cpuidle: using governor menu Jul 15 11:26:39.683714 kernel: Simple Boot Flag at 0x36 set to 0x80 Jul 15 11:26:39.683720 kernel: ACPI: bus type PCI registered Jul 15 11:26:39.683726 kernel: acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 Jul 15 11:26:39.683731 kernel: dca service started, version 1.12.1 Jul 15 11:26:39.683737 kernel: PCI: MMCONFIG for domain 0000 [bus 00-7f] at [mem 0xf0000000-0xf7ffffff] (base 0xf0000000) Jul 15 11:26:39.683743 kernel: PCI: MMCONFIG at [mem 0xf0000000-0xf7ffffff] reserved in E820 Jul 15 11:26:39.683750 kernel: PCI: Using configuration type 1 for base access Jul 15 11:26:39.683756 kernel: kprobes: kprobe jump-optimization is enabled. All kprobes are optimized if possible. Jul 15 11:26:39.683762 kernel: HugeTLB registered 1.00 GiB page size, pre-allocated 0 pages Jul 15 11:26:39.683768 kernel: HugeTLB registered 2.00 MiB page size, pre-allocated 0 pages Jul 15 11:26:39.683773 kernel: ACPI: Added _OSI(Module Device) Jul 15 11:26:39.683780 kernel: ACPI: Added _OSI(Processor Device) Jul 15 11:26:39.683785 kernel: ACPI: Added _OSI(Processor Aggregator Device) Jul 15 11:26:39.683791 kernel: ACPI: Added _OSI(Linux-Dell-Video) Jul 15 11:26:39.683797 kernel: ACPI: Added _OSI(Linux-Lenovo-NV-HDMI-Audio) Jul 15 11:26:39.683803 kernel: ACPI: Added _OSI(Linux-HPI-Hybrid-Graphics) Jul 15 11:26:39.683810 kernel: ACPI: 1 ACPI AML tables successfully acquired and loaded Jul 15 11:26:39.683815 kernel: ACPI: [Firmware Bug]: BIOS _OSI(Linux) query ignored Jul 15 11:26:39.683821 kernel: ACPI: Interpreter enabled Jul 15 11:26:39.683827 kernel: ACPI: PM: (supports S0 S1 S5) Jul 15 11:26:39.683832 kernel: ACPI: Using IOAPIC for interrupt routing Jul 15 11:26:39.683838 kernel: PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug Jul 15 11:26:39.683846 kernel: ACPI: Enabled 4 GPEs in block 00 to 0F Jul 15 11:26:39.683852 kernel: ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-7f]) Jul 15 11:26:39.683947 kernel: acpi PNP0A03:00: _OSC: OS supports [ExtendedConfig ASPM ClockPM Segments MSI HPX-Type3] Jul 15 11:26:39.684002 kernel: acpi PNP0A03:00: _OSC: platform does not support [AER LTR] Jul 15 11:26:39.684054 kernel: acpi PNP0A03:00: _OSC: OS now controls [PCIeHotplug PME PCIeCapability] Jul 15 11:26:39.684063 kernel: PCI host bridge to bus 0000:00 Jul 15 11:26:39.684119 kernel: pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff window] Jul 15 11:26:39.684165 kernel: pci_bus 0000:00: root bus resource [mem 0x000cc000-0x000dbfff window] Jul 15 11:26:39.684210 kernel: pci_bus 0000:00: root bus resource [mem 0xc0000000-0xfebfffff window] Jul 15 11:26:39.684252 kernel: pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7 window] Jul 15 11:26:39.684295 kernel: pci_bus 0000:00: root bus resource [io 0x0d00-0xfeff window] Jul 15 11:26:39.684337 kernel: pci_bus 0000:00: root bus resource [bus 00-7f] Jul 15 11:26:39.684399 kernel: pci 0000:00:00.0: [8086:7190] type 00 class 0x060000 Jul 15 11:26:39.684456 kernel: pci 0000:00:01.0: [8086:7191] type 01 class 0x060400 Jul 15 11:26:39.684513 kernel: pci 0000:00:07.0: [8086:7110] type 00 class 0x060100 Jul 15 11:26:39.684578 kernel: pci 0000:00:07.1: [8086:7111] type 00 class 0x01018a Jul 15 11:26:39.684629 kernel: pci 0000:00:07.1: reg 0x20: [io 0x1060-0x106f] Jul 15 11:26:39.684678 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x10: [io 0x01f0-0x01f7] Jul 15 11:26:39.684727 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x14: [io 0x03f6] Jul 15 11:26:39.684811 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x18: [io 0x0170-0x0177] Jul 15 11:26:39.684869 kernel: pci 0000:00:07.1: legacy IDE quirk: reg 0x1c: [io 0x0376] Jul 15 11:26:39.694222 kernel: pci 0000:00:07.3: [8086:7113] type 00 class 0x068000 Jul 15 11:26:39.694281 kernel: pci 0000:00:07.3: quirk: [io 0x1000-0x103f] claimed by PIIX4 ACPI Jul 15 11:26:39.694333 kernel: pci 0000:00:07.3: quirk: [io 0x1040-0x104f] claimed by PIIX4 SMB Jul 15 11:26:39.694387 kernel: pci 0000:00:07.7: [15ad:0740] type 00 class 0x088000 Jul 15 11:26:39.694437 kernel: pci 0000:00:07.7: reg 0x10: [io 0x1080-0x10bf] Jul 15 11:26:39.694486 kernel: pci 0000:00:07.7: reg 0x14: [mem 0xfebfe000-0xfebfffff 64bit] Jul 15 11:26:39.694542 kernel: pci 0000:00:0f.0: [15ad:0405] type 00 class 0x030000 Jul 15 11:26:39.694631 kernel: pci 0000:00:0f.0: reg 0x10: [io 0x1070-0x107f] Jul 15 11:26:39.694682 kernel: pci 0000:00:0f.0: reg 0x14: [mem 0xe8000000-0xefffffff pref] Jul 15 11:26:39.694730 kernel: pci 0000:00:0f.0: reg 0x18: [mem 0xfe000000-0xfe7fffff] Jul 15 11:26:39.694778 kernel: pci 0000:00:0f.0: reg 0x30: [mem 0x00000000-0x00007fff pref] Jul 15 11:26:39.694825 kernel: pci 0000:00:0f.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] Jul 15 11:26:39.694884 kernel: pci 0000:00:11.0: [15ad:0790] type 01 class 0x060401 Jul 15 11:26:39.694941 kernel: pci 0000:00:15.0: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.694990 kernel: pci 0000:00:15.0: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.695042 kernel: pci 0000:00:15.1: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.695093 kernel: pci 0000:00:15.1: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.695152 kernel: pci 0000:00:15.2: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.695200 kernel: pci 0000:00:15.2: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.695257 kernel: pci 0000:00:15.3: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.695312 kernel: pci 0000:00:15.3: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.695365 kernel: pci 0000:00:15.4: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.695413 kernel: pci 0000:00:15.4: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.695464 kernel: pci 0000:00:15.5: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.695515 kernel: pci 0000:00:15.5: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.695578 kernel: pci 0000:00:15.6: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.695654 kernel: pci 0000:00:15.6: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.695990 kernel: pci 0000:00:15.7: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.696045 kernel: pci 0000:00:15.7: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.696099 kernel: pci 0000:00:16.0: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.696149 kernel: pci 0000:00:16.0: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.696211 kernel: pci 0000:00:16.1: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.696261 kernel: pci 0000:00:16.1: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.696314 kernel: pci 0000:00:16.2: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.696363 kernel: pci 0000:00:16.2: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.696415 kernel: pci 0000:00:16.3: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.696463 kernel: pci 0000:00:16.3: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.696520 kernel: pci 0000:00:16.4: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.697607 kernel: pci 0000:00:16.4: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.697684 kernel: pci 0000:00:16.5: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.697739 kernel: pci 0000:00:16.5: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.697793 kernel: pci 0000:00:16.6: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.697858 kernel: pci 0000:00:16.6: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.697953 kernel: pci 0000:00:16.7: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.698280 kernel: pci 0000:00:16.7: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.698340 kernel: pci 0000:00:17.0: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.698391 kernel: pci 0000:00:17.0: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.698446 kernel: pci 0000:00:17.1: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.698495 kernel: pci 0000:00:17.1: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.698548 kernel: pci 0000:00:17.2: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.698607 kernel: pci 0000:00:17.2: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.698664 kernel: pci 0000:00:17.3: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.698713 kernel: pci 0000:00:17.3: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.698769 kernel: pci 0000:00:17.4: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.698819 kernel: pci 0000:00:17.4: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.698873 kernel: pci 0000:00:17.5: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.698925 kernel: pci 0000:00:17.5: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.698977 kernel: pci 0000:00:17.6: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.699026 kernel: pci 0000:00:17.6: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.699078 kernel: pci 0000:00:17.7: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.699126 kernel: pci 0000:00:17.7: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.699177 kernel: pci 0000:00:18.0: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.699229 kernel: pci 0000:00:18.0: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.703636 kernel: pci 0000:00:18.1: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.703704 kernel: pci 0000:00:18.1: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.703761 kernel: pci 0000:00:18.2: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.703811 kernel: pci 0000:00:18.2: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.703863 kernel: pci 0000:00:18.3: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.703916 kernel: pci 0000:00:18.3: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.703968 kernel: pci 0000:00:18.4: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.704016 kernel: pci 0000:00:18.4: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.704072 kernel: pci 0000:00:18.5: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.704129 kernel: pci 0000:00:18.5: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.704183 kernel: pci 0000:00:18.6: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.704233 kernel: pci 0000:00:18.6: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.704286 kernel: pci 0000:00:18.7: [15ad:07a0] type 01 class 0x060400 Jul 15 11:26:39.704333 kernel: pci 0000:00:18.7: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.704386 kernel: pci_bus 0000:01: extended config space not accessible Jul 15 11:26:39.704438 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 15 11:26:39.704489 kernel: pci_bus 0000:02: extended config space not accessible Jul 15 11:26:39.704498 kernel: acpiphp: Slot [32] registered Jul 15 11:26:39.704506 kernel: acpiphp: Slot [33] registered Jul 15 11:26:39.704512 kernel: acpiphp: Slot [34] registered Jul 15 11:26:39.704518 kernel: acpiphp: Slot [35] registered Jul 15 11:26:39.704523 kernel: acpiphp: Slot [36] registered Jul 15 11:26:39.704529 kernel: acpiphp: Slot [37] registered Jul 15 11:26:39.704535 kernel: acpiphp: Slot [38] registered Jul 15 11:26:39.704541 kernel: acpiphp: Slot [39] registered Jul 15 11:26:39.704546 kernel: acpiphp: Slot [40] registered Jul 15 11:26:39.704552 kernel: acpiphp: Slot [41] registered Jul 15 11:26:39.704559 kernel: acpiphp: Slot [42] registered Jul 15 11:26:39.704571 kernel: acpiphp: Slot [43] registered Jul 15 11:26:39.704577 kernel: acpiphp: Slot [44] registered Jul 15 11:26:39.704583 kernel: acpiphp: Slot [45] registered Jul 15 11:26:39.704588 kernel: acpiphp: Slot [46] registered Jul 15 11:26:39.704594 kernel: acpiphp: Slot [47] registered Jul 15 11:26:39.704599 kernel: acpiphp: Slot [48] registered Jul 15 11:26:39.704605 kernel: acpiphp: Slot [49] registered Jul 15 11:26:39.704611 kernel: acpiphp: Slot [50] registered Jul 15 11:26:39.704616 kernel: acpiphp: Slot [51] registered Jul 15 11:26:39.704623 kernel: acpiphp: Slot [52] registered Jul 15 11:26:39.704629 kernel: acpiphp: Slot [53] registered Jul 15 11:26:39.704635 kernel: acpiphp: Slot [54] registered Jul 15 11:26:39.704641 kernel: acpiphp: Slot [55] registered Jul 15 11:26:39.704647 kernel: acpiphp: Slot [56] registered Jul 15 11:26:39.704652 kernel: acpiphp: Slot [57] registered Jul 15 11:26:39.704658 kernel: acpiphp: Slot [58] registered Jul 15 11:26:39.704664 kernel: acpiphp: Slot [59] registered Jul 15 11:26:39.704669 kernel: acpiphp: Slot [60] registered Jul 15 11:26:39.704676 kernel: acpiphp: Slot [61] registered Jul 15 11:26:39.704682 kernel: acpiphp: Slot [62] registered Jul 15 11:26:39.704687 kernel: acpiphp: Slot [63] registered Jul 15 11:26:39.704738 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] (subtractive decode) Jul 15 11:26:39.704787 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 15 11:26:39.704834 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 15 11:26:39.705660 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 15 11:26:39.705715 kernel: pci 0000:00:11.0: bridge window [mem 0x000a0000-0x000bffff window] (subtractive decode) Jul 15 11:26:39.705769 kernel: pci 0000:00:11.0: bridge window [mem 0x000cc000-0x000dbfff window] (subtractive decode) Jul 15 11:26:39.705818 kernel: pci 0000:00:11.0: bridge window [mem 0xc0000000-0xfebfffff window] (subtractive decode) Jul 15 11:26:39.705865 kernel: pci 0000:00:11.0: bridge window [io 0x0000-0x0cf7 window] (subtractive decode) Jul 15 11:26:39.705913 kernel: pci 0000:00:11.0: bridge window [io 0x0d00-0xfeff window] (subtractive decode) Jul 15 11:26:39.705967 kernel: pci 0000:03:00.0: [15ad:07c0] type 00 class 0x010700 Jul 15 11:26:39.706017 kernel: pci 0000:03:00.0: reg 0x10: [io 0x4000-0x4007] Jul 15 11:26:39.706066 kernel: pci 0000:03:00.0: reg 0x14: [mem 0xfd5f8000-0xfd5fffff 64bit] Jul 15 11:26:39.706117 kernel: pci 0000:03:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 15 11:26:39.706166 kernel: pci 0000:03:00.0: PME# supported from D0 D3hot D3cold Jul 15 11:26:39.706214 kernel: pci 0000:03:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 15 11:26:39.706264 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 15 11:26:39.706312 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 15 11:26:39.706359 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 15 11:26:39.706408 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 15 11:26:39.706456 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 15 11:26:39.706505 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 15 11:26:39.706552 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 15 11:26:39.706611 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 15 11:26:39.706659 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 15 11:26:39.706706 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 15 11:26:39.706753 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 15 11:26:39.706802 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 15 11:26:39.706853 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 15 11:26:39.706901 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 15 11:26:39.706950 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 15 11:26:39.706998 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 15 11:26:39.707045 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 15 11:26:39.707097 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 15 11:26:39.707154 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 15 11:26:39.707202 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 15 11:26:39.707251 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 15 11:26:39.707300 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 15 11:26:39.707346 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 15 11:26:39.707395 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 15 11:26:39.707443 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 15 11:26:39.707492 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 15 11:26:39.707547 kernel: pci 0000:0b:00.0: [15ad:07b0] type 00 class 0x020000 Jul 15 11:26:39.709683 kernel: pci 0000:0b:00.0: reg 0x10: [mem 0xfd4fc000-0xfd4fcfff] Jul 15 11:26:39.709742 kernel: pci 0000:0b:00.0: reg 0x14: [mem 0xfd4fd000-0xfd4fdfff] Jul 15 11:26:39.709794 kernel: pci 0000:0b:00.0: reg 0x18: [mem 0xfd4fe000-0xfd4fffff] Jul 15 11:26:39.709845 kernel: pci 0000:0b:00.0: reg 0x1c: [io 0x5000-0x500f] Jul 15 11:26:39.709895 kernel: pci 0000:0b:00.0: reg 0x30: [mem 0x00000000-0x0000ffff pref] Jul 15 11:26:39.709948 kernel: pci 0000:0b:00.0: supports D1 D2 Jul 15 11:26:39.709998 kernel: pci 0000:0b:00.0: PME# supported from D0 D1 D2 D3hot D3cold Jul 15 11:26:39.710047 kernel: pci 0000:0b:00.0: disabling ASPM on pre-1.1 PCIe device. You can enable it with 'pcie_aspm=force' Jul 15 11:26:39.710097 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 15 11:26:39.710151 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 15 11:26:39.710199 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 15 11:26:39.710249 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 15 11:26:39.710297 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 15 11:26:39.710347 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 15 11:26:39.710401 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 15 11:26:39.710464 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 15 11:26:39.710523 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 15 11:26:39.712578 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 15 11:26:39.712639 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 15 11:26:39.712694 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 15 11:26:39.712744 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 15 11:26:39.712797 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 15 11:26:39.712848 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 15 11:26:39.712898 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 15 11:26:39.712946 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 15 11:26:39.712997 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 15 11:26:39.713056 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 15 11:26:39.713125 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 15 11:26:39.713179 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 15 11:26:39.713231 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 15 11:26:39.713278 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 15 11:26:39.713329 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 15 11:26:39.713378 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 15 11:26:39.713424 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 15 11:26:39.713474 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 15 11:26:39.713522 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 15 11:26:39.713636 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 15 11:26:39.713689 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 15 11:26:39.713739 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 15 11:26:39.713787 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 15 11:26:39.713834 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 15 11:26:39.713881 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 15 11:26:39.713931 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 15 11:26:39.713979 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 15 11:26:39.714028 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 15 11:26:39.714076 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 15 11:26:39.714129 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 15 11:26:39.714177 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 15 11:26:39.714223 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 15 11:26:39.714272 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 15 11:26:39.714320 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 15 11:26:39.714367 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 15 11:26:39.714418 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 15 11:26:39.714465 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 15 11:26:39.714512 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 15 11:26:39.715600 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 15 11:26:39.715669 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 15 11:26:39.715723 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 15 11:26:39.715775 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 15 11:26:39.715825 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 15 11:26:39.715877 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 15 11:26:39.715927 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 15 11:26:39.715976 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 15 11:26:39.716025 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 15 11:26:39.716073 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 15 11:26:39.716141 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 15 11:26:39.716189 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 15 11:26:39.716236 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 15 11:26:39.716285 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 15 11:26:39.716333 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 15 11:26:39.720327 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 15 11:26:39.720384 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 15 11:26:39.720436 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 15 11:26:39.720506 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 15 11:26:39.720774 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 15 11:26:39.720832 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 15 11:26:39.720882 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 15 11:26:39.720935 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 15 11:26:39.720986 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 15 11:26:39.721033 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 15 11:26:39.721080 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 15 11:26:39.721137 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 15 11:26:39.721185 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 15 11:26:39.721232 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 15 11:26:39.721282 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 15 11:26:39.721329 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 15 11:26:39.721375 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 15 11:26:39.721383 kernel: ACPI: PCI: Interrupt link LNKA configured for IRQ 9 Jul 15 11:26:39.721390 kernel: ACPI: PCI: Interrupt link LNKB configured for IRQ 0 Jul 15 11:26:39.721395 kernel: ACPI: PCI: Interrupt link LNKB disabled Jul 15 11:26:39.721401 kernel: ACPI: PCI: Interrupt link LNKC configured for IRQ 11 Jul 15 11:26:39.721407 kernel: ACPI: PCI: Interrupt link LNKD configured for IRQ 10 Jul 15 11:26:39.721414 kernel: iommu: Default domain type: Translated Jul 15 11:26:39.721420 kernel: iommu: DMA domain TLB invalidation policy: lazy mode Jul 15 11:26:39.721467 kernel: pci 0000:00:0f.0: vgaarb: setting as boot VGA device Jul 15 11:26:39.721514 kernel: pci 0000:00:0f.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none Jul 15 11:26:39.721566 kernel: pci 0000:00:0f.0: vgaarb: bridge control possible Jul 15 11:26:39.721780 kernel: vgaarb: loaded Jul 15 11:26:39.721787 kernel: pps_core: LinuxPPS API ver. 1 registered Jul 15 11:26:39.721794 kernel: pps_core: Software ver. 5.3.6 - Copyright 2005-2007 Rodolfo Giometti Jul 15 11:26:39.721799 kernel: PTP clock support registered Jul 15 11:26:39.721807 kernel: PCI: Using ACPI for IRQ routing Jul 15 11:26:39.721813 kernel: PCI: pci_cache_line_size set to 64 bytes Jul 15 11:26:39.721818 kernel: e820: reserve RAM buffer [mem 0x0009ec00-0x0009ffff] Jul 15 11:26:39.721825 kernel: e820: reserve RAM buffer [mem 0x7fee0000-0x7fffffff] Jul 15 11:26:39.721830 kernel: hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0 Jul 15 11:26:39.721836 kernel: hpet0: 16 comparators, 64-bit 14.318180 MHz counter Jul 15 11:26:39.721842 kernel: clocksource: Switched to clocksource tsc-early Jul 15 11:26:39.721847 kernel: VFS: Disk quotas dquot_6.6.0 Jul 15 11:26:39.721853 kernel: VFS: Dquot-cache hash table entries: 512 (order 0, 4096 bytes) Jul 15 11:26:39.721860 kernel: pnp: PnP ACPI init Jul 15 11:26:39.721921 kernel: system 00:00: [io 0x1000-0x103f] has been reserved Jul 15 11:26:39.721987 kernel: system 00:00: [io 0x1040-0x104f] has been reserved Jul 15 11:26:39.722251 kernel: system 00:00: [io 0x0cf0-0x0cf1] has been reserved Jul 15 11:26:39.722304 kernel: system 00:04: [mem 0xfed00000-0xfed003ff] has been reserved Jul 15 11:26:39.722353 kernel: pnp 00:06: [dma 2] Jul 15 11:26:39.722402 kernel: system 00:07: [io 0xfce0-0xfcff] has been reserved Jul 15 11:26:39.722448 kernel: system 00:07: [mem 0xf0000000-0xf7ffffff] has been reserved Jul 15 11:26:39.722492 kernel: system 00:07: [mem 0xfe800000-0xfe9fffff] has been reserved Jul 15 11:26:39.722500 kernel: pnp: PnP ACPI: found 8 devices Jul 15 11:26:39.722506 kernel: clocksource: acpi_pm: mask: 0xffffff max_cycles: 0xffffff, max_idle_ns: 2085701024 ns Jul 15 11:26:39.722512 kernel: NET: Registered PF_INET protocol family Jul 15 11:26:39.722518 kernel: IP idents hash table entries: 32768 (order: 6, 262144 bytes, linear) Jul 15 11:26:39.722523 kernel: tcp_listen_portaddr_hash hash table entries: 1024 (order: 2, 16384 bytes, linear) Jul 15 11:26:39.722531 kernel: Table-perturb hash table entries: 65536 (order: 6, 262144 bytes, linear) Jul 15 11:26:39.722537 kernel: TCP established hash table entries: 16384 (order: 5, 131072 bytes, linear) Jul 15 11:26:39.722543 kernel: TCP bind hash table entries: 16384 (order: 6, 262144 bytes, linear) Jul 15 11:26:39.722548 kernel: TCP: Hash tables configured (established 16384 bind 16384) Jul 15 11:26:39.722555 kernel: UDP hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 15 11:26:39.722584 kernel: UDP-Lite hash table entries: 1024 (order: 3, 32768 bytes, linear) Jul 15 11:26:39.722590 kernel: NET: Registered PF_UNIX/PF_LOCAL protocol family Jul 15 11:26:39.722596 kernel: NET: Registered PF_XDP protocol family Jul 15 11:26:39.722649 kernel: pci 0000:00:15.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 03] add_size 200000 add_align 100000 Jul 15 11:26:39.722703 kernel: pci 0000:00:15.3: bridge window [io 0x1000-0x0fff] to [bus 06] add_size 1000 Jul 15 11:26:39.722753 kernel: pci 0000:00:15.4: bridge window [io 0x1000-0x0fff] to [bus 07] add_size 1000 Jul 15 11:26:39.722801 kernel: pci 0000:00:15.5: bridge window [io 0x1000-0x0fff] to [bus 08] add_size 1000 Jul 15 11:26:39.722850 kernel: pci 0000:00:15.6: bridge window [io 0x1000-0x0fff] to [bus 09] add_size 1000 Jul 15 11:26:39.722898 kernel: pci 0000:00:15.7: bridge window [io 0x1000-0x0fff] to [bus 0a] add_size 1000 Jul 15 11:26:39.722946 kernel: pci 0000:00:16.0: bridge window [mem 0x00100000-0x000fffff 64bit pref] to [bus 0b] add_size 200000 add_align 100000 Jul 15 11:26:39.722996 kernel: pci 0000:00:16.3: bridge window [io 0x1000-0x0fff] to [bus 0e] add_size 1000 Jul 15 11:26:39.723044 kernel: pci 0000:00:16.4: bridge window [io 0x1000-0x0fff] to [bus 0f] add_size 1000 Jul 15 11:26:39.723092 kernel: pci 0000:00:16.5: bridge window [io 0x1000-0x0fff] to [bus 10] add_size 1000 Jul 15 11:26:39.723370 kernel: pci 0000:00:16.6: bridge window [io 0x1000-0x0fff] to [bus 11] add_size 1000 Jul 15 11:26:39.723437 kernel: pci 0000:00:16.7: bridge window [io 0x1000-0x0fff] to [bus 12] add_size 1000 Jul 15 11:26:39.723500 kernel: pci 0000:00:17.3: bridge window [io 0x1000-0x0fff] to [bus 16] add_size 1000 Jul 15 11:26:39.727032 kernel: pci 0000:00:17.4: bridge window [io 0x1000-0x0fff] to [bus 17] add_size 1000 Jul 15 11:26:39.727092 kernel: pci 0000:00:17.5: bridge window [io 0x1000-0x0fff] to [bus 18] add_size 1000 Jul 15 11:26:39.727144 kernel: pci 0000:00:17.6: bridge window [io 0x1000-0x0fff] to [bus 19] add_size 1000 Jul 15 11:26:39.727194 kernel: pci 0000:00:17.7: bridge window [io 0x1000-0x0fff] to [bus 1a] add_size 1000 Jul 15 11:26:39.727243 kernel: pci 0000:00:18.2: bridge window [io 0x1000-0x0fff] to [bus 1d] add_size 1000 Jul 15 11:26:39.727294 kernel: pci 0000:00:18.3: bridge window [io 0x1000-0x0fff] to [bus 1e] add_size 1000 Jul 15 11:26:39.727342 kernel: pci 0000:00:18.4: bridge window [io 0x1000-0x0fff] to [bus 1f] add_size 1000 Jul 15 11:26:39.727390 kernel: pci 0000:00:18.5: bridge window [io 0x1000-0x0fff] to [bus 20] add_size 1000 Jul 15 11:26:39.727438 kernel: pci 0000:00:18.6: bridge window [io 0x1000-0x0fff] to [bus 21] add_size 1000 Jul 15 11:26:39.727487 kernel: pci 0000:00:18.7: bridge window [io 0x1000-0x0fff] to [bus 22] add_size 1000 Jul 15 11:26:39.727535 kernel: pci 0000:00:15.0: BAR 15: assigned [mem 0xc0000000-0xc01fffff 64bit pref] Jul 15 11:26:39.727592 kernel: pci 0000:00:16.0: BAR 15: assigned [mem 0xc0200000-0xc03fffff 64bit pref] Jul 15 11:26:39.727642 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.728645 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.728705 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.728814 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.728870 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.728919 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.728967 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.729018 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.729066 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.729113 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.729162 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.729209 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.729258 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.729304 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.729352 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.729402 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.729450 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.729498 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.729547 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.729602 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.729651 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.729698 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.729745 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.729796 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.729886 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.729940 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.729992 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.730049 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.730281 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.730338 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.730392 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.730444 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.730495 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.730543 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.730603 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.730653 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.730701 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.730748 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.730796 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.730844 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.730894 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.730942 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.730988 kernel: pci 0000:00:18.7: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.731035 kernel: pci 0000:00:18.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.731081 kernel: pci 0000:00:18.6: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.731129 kernel: pci 0000:00:18.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.731176 kernel: pci 0000:00:18.5: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.731223 kernel: pci 0000:00:18.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.731270 kernel: pci 0000:00:18.4: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.731319 kernel: pci 0000:00:18.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.731366 kernel: pci 0000:00:18.3: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.731412 kernel: pci 0000:00:18.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.731459 kernel: pci 0000:00:18.2: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.731506 kernel: pci 0000:00:18.2: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.731554 kernel: pci 0000:00:17.7: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.731610 kernel: pci 0000:00:17.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.731657 kernel: pci 0000:00:17.6: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.731704 kernel: pci 0000:00:17.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.731753 kernel: pci 0000:00:17.5: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.731800 kernel: pci 0000:00:17.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.731846 kernel: pci 0000:00:17.4: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.731893 kernel: pci 0000:00:17.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.731941 kernel: pci 0000:00:17.3: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.731998 kernel: pci 0000:00:17.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.732046 kernel: pci 0000:00:16.7: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.732092 kernel: pci 0000:00:16.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.732175 kernel: pci 0000:00:16.6: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.732221 kernel: pci 0000:00:16.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.732271 kernel: pci 0000:00:16.5: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.732318 kernel: pci 0000:00:16.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.732364 kernel: pci 0000:00:16.4: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.732410 kernel: pci 0000:00:16.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.732456 kernel: pci 0000:00:16.3: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.732503 kernel: pci 0000:00:16.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.732550 kernel: pci 0000:00:15.7: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.732908 kernel: pci 0000:00:15.7: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.732962 kernel: pci 0000:00:15.6: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.733015 kernel: pci 0000:00:15.6: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.733068 kernel: pci 0000:00:15.5: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.733125 kernel: pci 0000:00:15.5: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.733175 kernel: pci 0000:00:15.4: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.733222 kernel: pci 0000:00:15.4: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.733270 kernel: pci 0000:00:15.3: BAR 13: no space for [io size 0x1000] Jul 15 11:26:39.733317 kernel: pci 0000:00:15.3: BAR 13: failed to assign [io size 0x1000] Jul 15 11:26:39.733366 kernel: pci 0000:00:01.0: PCI bridge to [bus 01] Jul 15 11:26:39.733414 kernel: pci 0000:00:11.0: PCI bridge to [bus 02] Jul 15 11:26:39.733463 kernel: pci 0000:00:11.0: bridge window [io 0x2000-0x3fff] Jul 15 11:26:39.733510 kernel: pci 0000:00:11.0: bridge window [mem 0xfd600000-0xfdffffff] Jul 15 11:26:39.733556 kernel: pci 0000:00:11.0: bridge window [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 15 11:26:39.733623 kernel: pci 0000:03:00.0: BAR 6: assigned [mem 0xfd500000-0xfd50ffff pref] Jul 15 11:26:39.733672 kernel: pci 0000:00:15.0: PCI bridge to [bus 03] Jul 15 11:26:39.733720 kernel: pci 0000:00:15.0: bridge window [io 0x4000-0x4fff] Jul 15 11:26:39.733768 kernel: pci 0000:00:15.0: bridge window [mem 0xfd500000-0xfd5fffff] Jul 15 11:26:39.733814 kernel: pci 0000:00:15.0: bridge window [mem 0xc0000000-0xc01fffff 64bit pref] Jul 15 11:26:39.733865 kernel: pci 0000:00:15.1: PCI bridge to [bus 04] Jul 15 11:26:39.733912 kernel: pci 0000:00:15.1: bridge window [io 0x8000-0x8fff] Jul 15 11:26:39.733959 kernel: pci 0000:00:15.1: bridge window [mem 0xfd100000-0xfd1fffff] Jul 15 11:26:39.734006 kernel: pci 0000:00:15.1: bridge window [mem 0xe7800000-0xe78fffff 64bit pref] Jul 15 11:26:39.734054 kernel: pci 0000:00:15.2: PCI bridge to [bus 05] Jul 15 11:26:39.734101 kernel: pci 0000:00:15.2: bridge window [io 0xc000-0xcfff] Jul 15 11:26:39.734148 kernel: pci 0000:00:15.2: bridge window [mem 0xfcd00000-0xfcdfffff] Jul 15 11:26:39.734195 kernel: pci 0000:00:15.2: bridge window [mem 0xe7400000-0xe74fffff 64bit pref] Jul 15 11:26:39.734259 kernel: pci 0000:00:15.3: PCI bridge to [bus 06] Jul 15 11:26:39.734338 kernel: pci 0000:00:15.3: bridge window [mem 0xfc900000-0xfc9fffff] Jul 15 11:26:39.734388 kernel: pci 0000:00:15.3: bridge window [mem 0xe7000000-0xe70fffff 64bit pref] Jul 15 11:26:39.734436 kernel: pci 0000:00:15.4: PCI bridge to [bus 07] Jul 15 11:26:39.734483 kernel: pci 0000:00:15.4: bridge window [mem 0xfc500000-0xfc5fffff] Jul 15 11:26:39.734531 kernel: pci 0000:00:15.4: bridge window [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 15 11:26:39.734752 kernel: pci 0000:00:15.5: PCI bridge to [bus 08] Jul 15 11:26:39.734805 kernel: pci 0000:00:15.5: bridge window [mem 0xfc100000-0xfc1fffff] Jul 15 11:26:39.734864 kernel: pci 0000:00:15.5: bridge window [mem 0xe6800000-0xe68fffff 64bit pref] Jul 15 11:26:39.734913 kernel: pci 0000:00:15.6: PCI bridge to [bus 09] Jul 15 11:26:39.734961 kernel: pci 0000:00:15.6: bridge window [mem 0xfbd00000-0xfbdfffff] Jul 15 11:26:39.735008 kernel: pci 0000:00:15.6: bridge window [mem 0xe6400000-0xe64fffff 64bit pref] Jul 15 11:26:39.735340 kernel: pci 0000:00:15.7: PCI bridge to [bus 0a] Jul 15 11:26:39.735393 kernel: pci 0000:00:15.7: bridge window [mem 0xfb900000-0xfb9fffff] Jul 15 11:26:39.735443 kernel: pci 0000:00:15.7: bridge window [mem 0xe6000000-0xe60fffff 64bit pref] Jul 15 11:26:39.735751 kernel: pci 0000:0b:00.0: BAR 6: assigned [mem 0xfd400000-0xfd40ffff pref] Jul 15 11:26:39.735815 kernel: pci 0000:00:16.0: PCI bridge to [bus 0b] Jul 15 11:26:39.735871 kernel: pci 0000:00:16.0: bridge window [io 0x5000-0x5fff] Jul 15 11:26:39.735921 kernel: pci 0000:00:16.0: bridge window [mem 0xfd400000-0xfd4fffff] Jul 15 11:26:39.735981 kernel: pci 0000:00:16.0: bridge window [mem 0xc0200000-0xc03fffff 64bit pref] Jul 15 11:26:39.736050 kernel: pci 0000:00:16.1: PCI bridge to [bus 0c] Jul 15 11:26:39.736117 kernel: pci 0000:00:16.1: bridge window [io 0x9000-0x9fff] Jul 15 11:26:39.736167 kernel: pci 0000:00:16.1: bridge window [mem 0xfd000000-0xfd0fffff] Jul 15 11:26:39.736216 kernel: pci 0000:00:16.1: bridge window [mem 0xe7700000-0xe77fffff 64bit pref] Jul 15 11:26:39.736486 kernel: pci 0000:00:16.2: PCI bridge to [bus 0d] Jul 15 11:26:39.736548 kernel: pci 0000:00:16.2: bridge window [io 0xd000-0xdfff] Jul 15 11:26:39.736625 kernel: pci 0000:00:16.2: bridge window [mem 0xfcc00000-0xfccfffff] Jul 15 11:26:39.736687 kernel: pci 0000:00:16.2: bridge window [mem 0xe7300000-0xe73fffff 64bit pref] Jul 15 11:26:39.736740 kernel: pci 0000:00:16.3: PCI bridge to [bus 0e] Jul 15 11:26:39.736791 kernel: pci 0000:00:16.3: bridge window [mem 0xfc800000-0xfc8fffff] Jul 15 11:26:39.736840 kernel: pci 0000:00:16.3: bridge window [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 15 11:26:39.736889 kernel: pci 0000:00:16.4: PCI bridge to [bus 0f] Jul 15 11:26:39.736937 kernel: pci 0000:00:16.4: bridge window [mem 0xfc400000-0xfc4fffff] Jul 15 11:26:39.736985 kernel: pci 0000:00:16.4: bridge window [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 15 11:26:39.737033 kernel: pci 0000:00:16.5: PCI bridge to [bus 10] Jul 15 11:26:39.737083 kernel: pci 0000:00:16.5: bridge window [mem 0xfc000000-0xfc0fffff] Jul 15 11:26:39.737134 kernel: pci 0000:00:16.5: bridge window [mem 0xe6700000-0xe67fffff 64bit pref] Jul 15 11:26:39.737183 kernel: pci 0000:00:16.6: PCI bridge to [bus 11] Jul 15 11:26:39.737231 kernel: pci 0000:00:16.6: bridge window [mem 0xfbc00000-0xfbcfffff] Jul 15 11:26:39.737288 kernel: pci 0000:00:16.6: bridge window [mem 0xe6300000-0xe63fffff 64bit pref] Jul 15 11:26:39.737336 kernel: pci 0000:00:16.7: PCI bridge to [bus 12] Jul 15 11:26:39.737385 kernel: pci 0000:00:16.7: bridge window [mem 0xfb800000-0xfb8fffff] Jul 15 11:26:39.737432 kernel: pci 0000:00:16.7: bridge window [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 15 11:26:39.737482 kernel: pci 0000:00:17.0: PCI bridge to [bus 13] Jul 15 11:26:39.737530 kernel: pci 0000:00:17.0: bridge window [io 0x6000-0x6fff] Jul 15 11:26:39.738499 kernel: pci 0000:00:17.0: bridge window [mem 0xfd300000-0xfd3fffff] Jul 15 11:26:39.738557 kernel: pci 0000:00:17.0: bridge window [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 15 11:26:39.738619 kernel: pci 0000:00:17.1: PCI bridge to [bus 14] Jul 15 11:26:39.738670 kernel: pci 0000:00:17.1: bridge window [io 0xa000-0xafff] Jul 15 11:26:39.738727 kernel: pci 0000:00:17.1: bridge window [mem 0xfcf00000-0xfcffffff] Jul 15 11:26:39.738785 kernel: pci 0000:00:17.1: bridge window [mem 0xe7600000-0xe76fffff 64bit pref] Jul 15 11:26:39.738842 kernel: pci 0000:00:17.2: PCI bridge to [bus 15] Jul 15 11:26:39.738910 kernel: pci 0000:00:17.2: bridge window [io 0xe000-0xefff] Jul 15 11:26:39.738962 kernel: pci 0000:00:17.2: bridge window [mem 0xfcb00000-0xfcbfffff] Jul 15 11:26:39.739012 kernel: pci 0000:00:17.2: bridge window [mem 0xe7200000-0xe72fffff 64bit pref] Jul 15 11:26:39.739068 kernel: pci 0000:00:17.3: PCI bridge to [bus 16] Jul 15 11:26:39.739118 kernel: pci 0000:00:17.3: bridge window [mem 0xfc700000-0xfc7fffff] Jul 15 11:26:39.739165 kernel: pci 0000:00:17.3: bridge window [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 15 11:26:39.739213 kernel: pci 0000:00:17.4: PCI bridge to [bus 17] Jul 15 11:26:39.739260 kernel: pci 0000:00:17.4: bridge window [mem 0xfc300000-0xfc3fffff] Jul 15 11:26:39.739308 kernel: pci 0000:00:17.4: bridge window [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 15 11:26:39.739356 kernel: pci 0000:00:17.5: PCI bridge to [bus 18] Jul 15 11:26:39.739404 kernel: pci 0000:00:17.5: bridge window [mem 0xfbf00000-0xfbffffff] Jul 15 11:26:39.739451 kernel: pci 0000:00:17.5: bridge window [mem 0xe6600000-0xe66fffff 64bit pref] Jul 15 11:26:39.739501 kernel: pci 0000:00:17.6: PCI bridge to [bus 19] Jul 15 11:26:39.739550 kernel: pci 0000:00:17.6: bridge window [mem 0xfbb00000-0xfbbfffff] Jul 15 11:26:39.739966 kernel: pci 0000:00:17.6: bridge window [mem 0xe6200000-0xe62fffff 64bit pref] Jul 15 11:26:39.740023 kernel: pci 0000:00:17.7: PCI bridge to [bus 1a] Jul 15 11:26:39.740074 kernel: pci 0000:00:17.7: bridge window [mem 0xfb700000-0xfb7fffff] Jul 15 11:26:39.740448 kernel: pci 0000:00:17.7: bridge window [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 15 11:26:39.740509 kernel: pci 0000:00:18.0: PCI bridge to [bus 1b] Jul 15 11:26:39.740567 kernel: pci 0000:00:18.0: bridge window [io 0x7000-0x7fff] Jul 15 11:26:39.740776 kernel: pci 0000:00:18.0: bridge window [mem 0xfd200000-0xfd2fffff] Jul 15 11:26:39.740832 kernel: pci 0000:00:18.0: bridge window [mem 0xe7900000-0xe79fffff 64bit pref] Jul 15 11:26:39.740887 kernel: pci 0000:00:18.1: PCI bridge to [bus 1c] Jul 15 11:26:39.741135 kernel: pci 0000:00:18.1: bridge window [io 0xb000-0xbfff] Jul 15 11:26:39.741191 kernel: pci 0000:00:18.1: bridge window [mem 0xfce00000-0xfcefffff] Jul 15 11:26:39.741241 kernel: pci 0000:00:18.1: bridge window [mem 0xe7500000-0xe75fffff 64bit pref] Jul 15 11:26:39.741298 kernel: pci 0000:00:18.2: PCI bridge to [bus 1d] Jul 15 11:26:39.741348 kernel: pci 0000:00:18.2: bridge window [mem 0xfca00000-0xfcafffff] Jul 15 11:26:39.741397 kernel: pci 0000:00:18.2: bridge window [mem 0xe7100000-0xe71fffff 64bit pref] Jul 15 11:26:39.741453 kernel: pci 0000:00:18.3: PCI bridge to [bus 1e] Jul 15 11:26:39.741507 kernel: pci 0000:00:18.3: bridge window [mem 0xfc600000-0xfc6fffff] Jul 15 11:26:39.741559 kernel: pci 0000:00:18.3: bridge window [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 15 11:26:39.741915 kernel: pci 0000:00:18.4: PCI bridge to [bus 1f] Jul 15 11:26:39.741968 kernel: pci 0000:00:18.4: bridge window [mem 0xfc200000-0xfc2fffff] Jul 15 11:26:39.742018 kernel: pci 0000:00:18.4: bridge window [mem 0xe6900000-0xe69fffff 64bit pref] Jul 15 11:26:39.742069 kernel: pci 0000:00:18.5: PCI bridge to [bus 20] Jul 15 11:26:39.742119 kernel: pci 0000:00:18.5: bridge window [mem 0xfbe00000-0xfbefffff] Jul 15 11:26:39.742172 kernel: pci 0000:00:18.5: bridge window [mem 0xe6500000-0xe65fffff 64bit pref] Jul 15 11:26:39.742222 kernel: pci 0000:00:18.6: PCI bridge to [bus 21] Jul 15 11:26:39.742269 kernel: pci 0000:00:18.6: bridge window [mem 0xfba00000-0xfbafffff] Jul 15 11:26:39.742317 kernel: pci 0000:00:18.6: bridge window [mem 0xe6100000-0xe61fffff 64bit pref] Jul 15 11:26:39.742370 kernel: pci 0000:00:18.7: PCI bridge to [bus 22] Jul 15 11:26:39.742422 kernel: pci 0000:00:18.7: bridge window [mem 0xfb600000-0xfb6fffff] Jul 15 11:26:39.742475 kernel: pci 0000:00:18.7: bridge window [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 15 11:26:39.742525 kernel: pci_bus 0000:00: resource 4 [mem 0x000a0000-0x000bffff window] Jul 15 11:26:39.742577 kernel: pci_bus 0000:00: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 15 11:26:39.742621 kernel: pci_bus 0000:00: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 15 11:26:39.742664 kernel: pci_bus 0000:00: resource 7 [io 0x0000-0x0cf7 window] Jul 15 11:26:39.742705 kernel: pci_bus 0000:00: resource 8 [io 0x0d00-0xfeff window] Jul 15 11:26:39.742755 kernel: pci_bus 0000:02: resource 0 [io 0x2000-0x3fff] Jul 15 11:26:39.742801 kernel: pci_bus 0000:02: resource 1 [mem 0xfd600000-0xfdffffff] Jul 15 11:26:39.742845 kernel: pci_bus 0000:02: resource 2 [mem 0xe7b00000-0xe7ffffff 64bit pref] Jul 15 11:26:39.742890 kernel: pci_bus 0000:02: resource 4 [mem 0x000a0000-0x000bffff window] Jul 15 11:26:39.742943 kernel: pci_bus 0000:02: resource 5 [mem 0x000cc000-0x000dbfff window] Jul 15 11:26:39.742989 kernel: pci_bus 0000:02: resource 6 [mem 0xc0000000-0xfebfffff window] Jul 15 11:26:39.743034 kernel: pci_bus 0000:02: resource 7 [io 0x0000-0x0cf7 window] Jul 15 11:26:39.743081 kernel: pci_bus 0000:02: resource 8 [io 0x0d00-0xfeff window] Jul 15 11:26:39.743138 kernel: pci_bus 0000:03: resource 0 [io 0x4000-0x4fff] Jul 15 11:26:39.743197 kernel: pci_bus 0000:03: resource 1 [mem 0xfd500000-0xfd5fffff] Jul 15 11:26:39.743243 kernel: pci_bus 0000:03: resource 2 [mem 0xc0000000-0xc01fffff 64bit pref] Jul 15 11:26:39.743292 kernel: pci_bus 0000:04: resource 0 [io 0x8000-0x8fff] Jul 15 11:26:39.743338 kernel: pci_bus 0000:04: resource 1 [mem 0xfd100000-0xfd1fffff] Jul 15 11:26:39.743383 kernel: pci_bus 0000:04: resource 2 [mem 0xe7800000-0xe78fffff 64bit pref] Jul 15 11:26:39.743434 kernel: pci_bus 0000:05: resource 0 [io 0xc000-0xcfff] Jul 15 11:26:39.743479 kernel: pci_bus 0000:05: resource 1 [mem 0xfcd00000-0xfcdfffff] Jul 15 11:26:39.743529 kernel: pci_bus 0000:05: resource 2 [mem 0xe7400000-0xe74fffff 64bit pref] Jul 15 11:26:39.743821 kernel: pci_bus 0000:06: resource 1 [mem 0xfc900000-0xfc9fffff] Jul 15 11:26:39.743874 kernel: pci_bus 0000:06: resource 2 [mem 0xe7000000-0xe70fffff 64bit pref] Jul 15 11:26:39.743926 kernel: pci_bus 0000:07: resource 1 [mem 0xfc500000-0xfc5fffff] Jul 15 11:26:39.743972 kernel: pci_bus 0000:07: resource 2 [mem 0xe6c00000-0xe6cfffff 64bit pref] Jul 15 11:26:39.744051 kernel: pci_bus 0000:08: resource 1 [mem 0xfc100000-0xfc1fffff] Jul 15 11:26:39.744374 kernel: pci_bus 0000:08: resource 2 [mem 0xe6800000-0xe68fffff 64bit pref] Jul 15 11:26:39.744428 kernel: pci_bus 0000:09: resource 1 [mem 0xfbd00000-0xfbdfffff] Jul 15 11:26:39.744584 kernel: pci_bus 0000:09: resource 2 [mem 0xe6400000-0xe64fffff 64bit pref] Jul 15 11:26:39.744649 kernel: pci_bus 0000:0a: resource 1 [mem 0xfb900000-0xfb9fffff] Jul 15 11:26:39.744901 kernel: pci_bus 0000:0a: resource 2 [mem 0xe6000000-0xe60fffff 64bit pref] Jul 15 11:26:39.744963 kernel: pci_bus 0000:0b: resource 0 [io 0x5000-0x5fff] Jul 15 11:26:39.745010 kernel: pci_bus 0000:0b: resource 1 [mem 0xfd400000-0xfd4fffff] Jul 15 11:26:39.745055 kernel: pci_bus 0000:0b: resource 2 [mem 0xc0200000-0xc03fffff 64bit pref] Jul 15 11:26:39.745130 kernel: pci_bus 0000:0c: resource 0 [io 0x9000-0x9fff] Jul 15 11:26:39.745426 kernel: pci_bus 0000:0c: resource 1 [mem 0xfd000000-0xfd0fffff] Jul 15 11:26:39.745721 kernel: pci_bus 0000:0c: resource 2 [mem 0xe7700000-0xe77fffff 64bit pref] Jul 15 11:26:39.745788 kernel: pci_bus 0000:0d: resource 0 [io 0xd000-0xdfff] Jul 15 11:26:39.745839 kernel: pci_bus 0000:0d: resource 1 [mem 0xfcc00000-0xfccfffff] Jul 15 11:26:39.745890 kernel: pci_bus 0000:0d: resource 2 [mem 0xe7300000-0xe73fffff 64bit pref] Jul 15 11:26:39.745944 kernel: pci_bus 0000:0e: resource 1 [mem 0xfc800000-0xfc8fffff] Jul 15 11:26:39.745991 kernel: pci_bus 0000:0e: resource 2 [mem 0xe6f00000-0xe6ffffff 64bit pref] Jul 15 11:26:39.746040 kernel: pci_bus 0000:0f: resource 1 [mem 0xfc400000-0xfc4fffff] Jul 15 11:26:39.746088 kernel: pci_bus 0000:0f: resource 2 [mem 0xe6b00000-0xe6bfffff 64bit pref] Jul 15 11:26:39.746137 kernel: pci_bus 0000:10: resource 1 [mem 0xfc000000-0xfc0fffff] Jul 15 11:26:39.746185 kernel: pci_bus 0000:10: resource 2 [mem 0xe6700000-0xe67fffff 64bit pref] Jul 15 11:26:39.746234 kernel: pci_bus 0000:11: resource 1 [mem 0xfbc00000-0xfbcfffff] Jul 15 11:26:39.746279 kernel: pci_bus 0000:11: resource 2 [mem 0xe6300000-0xe63fffff 64bit pref] Jul 15 11:26:39.746329 kernel: pci_bus 0000:12: resource 1 [mem 0xfb800000-0xfb8fffff] Jul 15 11:26:39.746378 kernel: pci_bus 0000:12: resource 2 [mem 0xe5f00000-0xe5ffffff 64bit pref] Jul 15 11:26:39.746432 kernel: pci_bus 0000:13: resource 0 [io 0x6000-0x6fff] Jul 15 11:26:39.746477 kernel: pci_bus 0000:13: resource 1 [mem 0xfd300000-0xfd3fffff] Jul 15 11:26:39.746524 kernel: pci_bus 0000:13: resource 2 [mem 0xe7a00000-0xe7afffff 64bit pref] Jul 15 11:26:39.746584 kernel: pci_bus 0000:14: resource 0 [io 0xa000-0xafff] Jul 15 11:26:39.746631 kernel: pci_bus 0000:14: resource 1 [mem 0xfcf00000-0xfcffffff] Jul 15 11:26:39.746676 kernel: pci_bus 0000:14: resource 2 [mem 0xe7600000-0xe76fffff 64bit pref] Jul 15 11:26:39.746729 kernel: pci_bus 0000:15: resource 0 [io 0xe000-0xefff] Jul 15 11:26:39.746774 kernel: pci_bus 0000:15: resource 1 [mem 0xfcb00000-0xfcbfffff] Jul 15 11:26:39.746820 kernel: pci_bus 0000:15: resource 2 [mem 0xe7200000-0xe72fffff 64bit pref] Jul 15 11:26:39.746870 kernel: pci_bus 0000:16: resource 1 [mem 0xfc700000-0xfc7fffff] Jul 15 11:26:39.746915 kernel: pci_bus 0000:16: resource 2 [mem 0xe6e00000-0xe6efffff 64bit pref] Jul 15 11:26:39.746964 kernel: pci_bus 0000:17: resource 1 [mem 0xfc300000-0xfc3fffff] Jul 15 11:26:39.747010 kernel: pci_bus 0000:17: resource 2 [mem 0xe6a00000-0xe6afffff 64bit pref] Jul 15 11:26:39.747061 kernel: pci_bus 0000:18: resource 1 [mem 0xfbf00000-0xfbffffff] Jul 15 11:26:39.747119 kernel: pci_bus 0000:18: resource 2 [mem 0xe6600000-0xe66fffff 64bit pref] Jul 15 11:26:39.747170 kernel: pci_bus 0000:19: resource 1 [mem 0xfbb00000-0xfbbfffff] Jul 15 11:26:39.747216 kernel: pci_bus 0000:19: resource 2 [mem 0xe6200000-0xe62fffff 64bit pref] Jul 15 11:26:39.747265 kernel: pci_bus 0000:1a: resource 1 [mem 0xfb700000-0xfb7fffff] Jul 15 11:26:39.747310 kernel: pci_bus 0000:1a: resource 2 [mem 0xe5e00000-0xe5efffff 64bit pref] Jul 15 11:26:39.747364 kernel: pci_bus 0000:1b: resource 0 [io 0x7000-0x7fff] Jul 15 11:26:39.747409 kernel: pci_bus 0000:1b: resource 1 [mem 0xfd200000-0xfd2fffff] Jul 15 11:26:39.747454 kernel: pci_bus 0000:1b: resource 2 [mem 0xe7900000-0xe79fffff 64bit pref] Jul 15 11:26:39.747504 kernel: pci_bus 0000:1c: resource 0 [io 0xb000-0xbfff] Jul 15 11:26:39.747550 kernel: pci_bus 0000:1c: resource 1 [mem 0xfce00000-0xfcefffff] Jul 15 11:26:39.747609 kernel: pci_bus 0000:1c: resource 2 [mem 0xe7500000-0xe75fffff 64bit pref] Jul 15 11:26:39.747660 kernel: pci_bus 0000:1d: resource 1 [mem 0xfca00000-0xfcafffff] Jul 15 11:26:39.747709 kernel: pci_bus 0000:1d: resource 2 [mem 0xe7100000-0xe71fffff 64bit pref] Jul 15 11:26:39.747761 kernel: pci_bus 0000:1e: resource 1 [mem 0xfc600000-0xfc6fffff] Jul 15 11:26:39.747806 kernel: pci_bus 0000:1e: resource 2 [mem 0xe6d00000-0xe6dfffff 64bit pref] Jul 15 11:26:39.747856 kernel: pci_bus 0000:1f: resource 1 [mem 0xfc200000-0xfc2fffff] Jul 15 11:26:39.747902 kernel: pci_bus 0000:1f: resource 2 [mem 0xe6900000-0xe69fffff 64bit pref] Jul 15 11:26:39.747957 kernel: pci_bus 0000:20: resource 1 [mem 0xfbe00000-0xfbefffff] Jul 15 11:26:39.748003 kernel: pci_bus 0000:20: resource 2 [mem 0xe6500000-0xe65fffff 64bit pref] Jul 15 11:26:39.748056 kernel: pci_bus 0000:21: resource 1 [mem 0xfba00000-0xfbafffff] Jul 15 11:26:39.748106 kernel: pci_bus 0000:21: resource 2 [mem 0xe6100000-0xe61fffff 64bit pref] Jul 15 11:26:39.748160 kernel: pci_bus 0000:22: resource 1 [mem 0xfb600000-0xfb6fffff] Jul 15 11:26:39.748206 kernel: pci_bus 0000:22: resource 2 [mem 0xe5d00000-0xe5dfffff 64bit pref] Jul 15 11:26:39.748263 kernel: pci 0000:00:00.0: Limiting direct PCI/PCI transfers Jul 15 11:26:39.748273 kernel: PCI: CLS 32 bytes, default 64 Jul 15 11:26:39.748281 kernel: RAPL PMU: API unit is 2^-32 Joules, 0 fixed counters, 10737418240 ms ovfl timer Jul 15 11:26:39.748287 kernel: clocksource: tsc: mask: 0xffffffffffffffff max_cycles: 0x311fd3cd494, max_idle_ns: 440795223879 ns Jul 15 11:26:39.748294 kernel: clocksource: Switched to clocksource tsc Jul 15 11:26:39.748300 kernel: Initialise system trusted keyrings Jul 15 11:26:39.748306 kernel: workingset: timestamp_bits=39 max_order=19 bucket_order=0 Jul 15 11:26:39.748312 kernel: Key type asymmetric registered Jul 15 11:26:39.748318 kernel: Asymmetric key parser 'x509' registered Jul 15 11:26:39.748326 kernel: Block layer SCSI generic (bsg) driver version 0.4 loaded (major 249) Jul 15 11:26:39.748333 kernel: io scheduler mq-deadline registered Jul 15 11:26:39.748339 kernel: io scheduler kyber registered Jul 15 11:26:39.748345 kernel: io scheduler bfq registered Jul 15 11:26:39.748397 kernel: pcieport 0000:00:15.0: PME: Signaling with IRQ 24 Jul 15 11:26:39.748449 kernel: pcieport 0000:00:15.0: pciehp: Slot #160 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.748500 kernel: pcieport 0000:00:15.1: PME: Signaling with IRQ 25 Jul 15 11:26:39.748549 kernel: pcieport 0000:00:15.1: pciehp: Slot #161 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.748619 kernel: pcieport 0000:00:15.2: PME: Signaling with IRQ 26 Jul 15 11:26:39.748670 kernel: pcieport 0000:00:15.2: pciehp: Slot #162 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.748720 kernel: pcieport 0000:00:15.3: PME: Signaling with IRQ 27 Jul 15 11:26:39.748769 kernel: pcieport 0000:00:15.3: pciehp: Slot #163 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.748819 kernel: pcieport 0000:00:15.4: PME: Signaling with IRQ 28 Jul 15 11:26:39.748869 kernel: pcieport 0000:00:15.4: pciehp: Slot #164 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.748922 kernel: pcieport 0000:00:15.5: PME: Signaling with IRQ 29 Jul 15 11:26:39.748972 kernel: pcieport 0000:00:15.5: pciehp: Slot #165 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.749022 kernel: pcieport 0000:00:15.6: PME: Signaling with IRQ 30 Jul 15 11:26:39.749073 kernel: pcieport 0000:00:15.6: pciehp: Slot #166 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.749123 kernel: pcieport 0000:00:15.7: PME: Signaling with IRQ 31 Jul 15 11:26:39.749175 kernel: pcieport 0000:00:15.7: pciehp: Slot #167 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.749224 kernel: pcieport 0000:00:16.0: PME: Signaling with IRQ 32 Jul 15 11:26:39.749273 kernel: pcieport 0000:00:16.0: pciehp: Slot #192 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.749323 kernel: pcieport 0000:00:16.1: PME: Signaling with IRQ 33 Jul 15 11:26:39.749371 kernel: pcieport 0000:00:16.1: pciehp: Slot #193 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.749422 kernel: pcieport 0000:00:16.2: PME: Signaling with IRQ 34 Jul 15 11:26:39.749470 kernel: pcieport 0000:00:16.2: pciehp: Slot #194 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.749519 kernel: pcieport 0000:00:16.3: PME: Signaling with IRQ 35 Jul 15 11:26:39.749577 kernel: pcieport 0000:00:16.3: pciehp: Slot #195 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.749629 kernel: pcieport 0000:00:16.4: PME: Signaling with IRQ 36 Jul 15 11:26:39.749679 kernel: pcieport 0000:00:16.4: pciehp: Slot #196 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.749729 kernel: pcieport 0000:00:16.5: PME: Signaling with IRQ 37 Jul 15 11:26:39.749780 kernel: pcieport 0000:00:16.5: pciehp: Slot #197 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.749832 kernel: pcieport 0000:00:16.6: PME: Signaling with IRQ 38 Jul 15 11:26:39.749882 kernel: pcieport 0000:00:16.6: pciehp: Slot #198 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.749931 kernel: pcieport 0000:00:16.7: PME: Signaling with IRQ 39 Jul 15 11:26:39.749980 kernel: pcieport 0000:00:16.7: pciehp: Slot #199 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.750029 kernel: pcieport 0000:00:17.0: PME: Signaling with IRQ 40 Jul 15 11:26:39.750081 kernel: pcieport 0000:00:17.0: pciehp: Slot #224 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.750130 kernel: pcieport 0000:00:17.1: PME: Signaling with IRQ 41 Jul 15 11:26:39.750178 kernel: pcieport 0000:00:17.1: pciehp: Slot #225 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.750324 kernel: pcieport 0000:00:17.2: PME: Signaling with IRQ 42 Jul 15 11:26:39.750387 kernel: pcieport 0000:00:17.2: pciehp: Slot #226 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.750439 kernel: pcieport 0000:00:17.3: PME: Signaling with IRQ 43 Jul 15 11:26:39.750488 kernel: pcieport 0000:00:17.3: pciehp: Slot #227 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.750765 kernel: pcieport 0000:00:17.4: PME: Signaling with IRQ 44 Jul 15 11:26:39.750820 kernel: pcieport 0000:00:17.4: pciehp: Slot #228 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.750872 kernel: pcieport 0000:00:17.5: PME: Signaling with IRQ 45 Jul 15 11:26:39.750946 kernel: pcieport 0000:00:17.5: pciehp: Slot #229 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.751251 kernel: pcieport 0000:00:17.6: PME: Signaling with IRQ 46 Jul 15 11:26:39.751490 kernel: pcieport 0000:00:17.6: pciehp: Slot #230 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.751548 kernel: pcieport 0000:00:17.7: PME: Signaling with IRQ 47 Jul 15 11:26:39.751695 kernel: pcieport 0000:00:17.7: pciehp: Slot #231 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.752218 kernel: pcieport 0000:00:18.0: PME: Signaling with IRQ 48 Jul 15 11:26:39.752275 kernel: pcieport 0000:00:18.0: pciehp: Slot #256 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.752432 kernel: pcieport 0000:00:18.1: PME: Signaling with IRQ 49 Jul 15 11:26:39.752489 kernel: pcieport 0000:00:18.1: pciehp: Slot #257 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.752540 kernel: pcieport 0000:00:18.2: PME: Signaling with IRQ 50 Jul 15 11:26:39.752646 kernel: pcieport 0000:00:18.2: pciehp: Slot #258 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.752698 kernel: pcieport 0000:00:18.3: PME: Signaling with IRQ 51 Jul 15 11:26:39.752748 kernel: pcieport 0000:00:18.3: pciehp: Slot #259 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.752798 kernel: pcieport 0000:00:18.4: PME: Signaling with IRQ 52 Jul 15 11:26:39.752850 kernel: pcieport 0000:00:18.4: pciehp: Slot #260 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.752900 kernel: pcieport 0000:00:18.5: PME: Signaling with IRQ 53 Jul 15 11:26:39.752950 kernel: pcieport 0000:00:18.5: pciehp: Slot #261 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.752999 kernel: pcieport 0000:00:18.6: PME: Signaling with IRQ 54 Jul 15 11:26:39.753048 kernel: pcieport 0000:00:18.6: pciehp: Slot #262 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.753234 kernel: pcieport 0000:00:18.7: PME: Signaling with IRQ 55 Jul 15 11:26:39.753291 kernel: pcieport 0000:00:18.7: pciehp: Slot #263 AttnBtn+ PwrCtrl+ MRL- AttnInd- PwrInd- HotPlug+ Surprise- Interlock- NoCompl+ IbPresDis- LLActRep+ Jul 15 11:26:39.753300 kernel: ioatdma: Intel(R) QuickData Technology Driver 5.00 Jul 15 11:26:39.753307 kernel: Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled Jul 15 11:26:39.753314 kernel: 00:05: ttyS0 at I/O 0x3f8 (irq = 4, base_baud = 115200) is a 16550A Jul 15 11:26:39.753321 kernel: i8042: PNP: PS/2 Controller [PNP0303:KBC,PNP0f13:MOUS] at 0x60,0x64 irq 1,12 Jul 15 11:26:39.753327 kernel: serio: i8042 KBD port at 0x60,0x64 irq 1 Jul 15 11:26:39.753333 kernel: serio: i8042 AUX port at 0x60,0x64 irq 12 Jul 15 11:26:39.753386 kernel: rtc_cmos 00:01: registered as rtc0 Jul 15 11:26:39.753433 kernel: rtc_cmos 00:01: setting system clock to 2025-07-15T11:26:39 UTC (1752578799) Jul 15 11:26:39.753477 kernel: rtc_cmos 00:01: alarms up to one month, y3k, 114 bytes nvram Jul 15 11:26:39.753486 kernel: intel_pstate: CPU model not supported Jul 15 11:26:39.753494 kernel: NET: Registered PF_INET6 protocol family Jul 15 11:26:39.753500 kernel: input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input0 Jul 15 11:26:39.753507 kernel: Segment Routing with IPv6 Jul 15 11:26:39.753513 kernel: In-situ OAM (IOAM) with IPv6 Jul 15 11:26:39.753521 kernel: NET: Registered PF_PACKET protocol family Jul 15 11:26:39.753527 kernel: Key type dns_resolver registered Jul 15 11:26:39.753533 kernel: IPI shorthand broadcast: enabled Jul 15 11:26:39.753539 kernel: sched_clock: Marking stable (894499787, 228816049)->(1188247626, -64931790) Jul 15 11:26:39.753545 kernel: registered taskstats version 1 Jul 15 11:26:39.753551 kernel: Loading compiled-in X.509 certificates Jul 15 11:26:39.753557 kernel: Loaded X.509 cert 'Kinvolk GmbH: Module signing key for 5.15.188-flatcar: c4b3a19d3bd6de5654dc12075428550cf6251289' Jul 15 11:26:39.753588 kernel: Key type .fscrypt registered Jul 15 11:26:39.753595 kernel: Key type fscrypt-provisioning registered Jul 15 11:26:39.753950 kernel: ima: No TPM chip found, activating TPM-bypass! Jul 15 11:26:39.753961 kernel: ima: Allocated hash algorithm: sha1 Jul 15 11:26:39.753968 kernel: ima: No architecture policies found Jul 15 11:26:39.753974 kernel: clk: Disabling unused clocks Jul 15 11:26:39.753980 kernel: Freeing unused kernel image (initmem) memory: 47476K Jul 15 11:26:39.753987 kernel: Write protecting the kernel read-only data: 28672k Jul 15 11:26:39.753993 kernel: Freeing unused kernel image (text/rodata gap) memory: 2040K Jul 15 11:26:39.753999 kernel: Freeing unused kernel image (rodata/data gap) memory: 604K Jul 15 11:26:39.754007 kernel: Run /init as init process Jul 15 11:26:39.754014 kernel: with arguments: Jul 15 11:26:39.754020 kernel: /init Jul 15 11:26:39.754026 kernel: with environment: Jul 15 11:26:39.754032 kernel: HOME=/ Jul 15 11:26:39.754038 kernel: TERM=linux Jul 15 11:26:39.754044 kernel: BOOT_IMAGE=/flatcar/vmlinuz-a Jul 15 11:26:39.754052 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:26:39.754060 systemd[1]: Detected virtualization vmware. Jul 15 11:26:39.754068 systemd[1]: Detected architecture x86-64. Jul 15 11:26:39.754074 systemd[1]: Running in initrd. Jul 15 11:26:39.754081 systemd[1]: No hostname configured, using default hostname. Jul 15 11:26:39.754087 systemd[1]: Hostname set to . Jul 15 11:26:39.754093 systemd[1]: Initializing machine ID from random generator. Jul 15 11:26:39.754099 systemd[1]: Queued start job for default target initrd.target. Jul 15 11:26:39.754110 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:26:39.754116 systemd[1]: Reached target cryptsetup.target. Jul 15 11:26:39.754124 systemd[1]: Reached target paths.target. Jul 15 11:26:39.754130 systemd[1]: Reached target slices.target. Jul 15 11:26:39.754136 systemd[1]: Reached target swap.target. Jul 15 11:26:39.754142 systemd[1]: Reached target timers.target. Jul 15 11:26:39.754148 systemd[1]: Listening on iscsid.socket. Jul 15 11:26:39.754155 systemd[1]: Listening on iscsiuio.socket. Jul 15 11:26:39.754161 systemd[1]: Listening on systemd-journald-audit.socket. Jul 15 11:26:39.754168 systemd[1]: Listening on systemd-journald-dev-log.socket. Jul 15 11:26:39.754175 systemd[1]: Listening on systemd-journald.socket. Jul 15 11:26:39.754181 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:26:39.754187 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:26:39.754193 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:26:39.754200 systemd[1]: Reached target sockets.target. Jul 15 11:26:39.754206 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:26:39.754212 systemd[1]: Finished network-cleanup.service. Jul 15 11:26:39.754218 systemd[1]: Starting systemd-fsck-usr.service... Jul 15 11:26:39.754226 systemd[1]: Starting systemd-journald.service... Jul 15 11:26:39.754233 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:26:39.754239 systemd[1]: Starting systemd-resolved.service... Jul 15 11:26:39.754245 systemd[1]: Starting systemd-vconsole-setup.service... Jul 15 11:26:39.754252 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:26:39.754258 systemd[1]: Finished systemd-fsck-usr.service. Jul 15 11:26:39.754264 systemd[1]: Starting systemd-tmpfiles-setup-dev.service... Jul 15 11:26:39.754272 systemd[1]: Finished systemd-vconsole-setup.service. Jul 15 11:26:39.754278 kernel: audit: type=1130 audit(1752578799.675:2): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.754285 systemd[1]: Starting dracut-cmdline-ask.service... Jul 15 11:26:39.754292 systemd[1]: Finished systemd-tmpfiles-setup-dev.service. Jul 15 11:26:39.754299 kernel: audit: type=1130 audit(1752578799.688:3): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.754305 systemd[1]: Finished dracut-cmdline-ask.service. Jul 15 11:26:39.754311 kernel: audit: type=1130 audit(1752578799.698:4): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.754318 systemd[1]: Starting dracut-cmdline.service... Jul 15 11:26:39.754324 systemd[1]: Started systemd-resolved.service. Jul 15 11:26:39.754331 kernel: audit: type=1130 audit(1752578799.723:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.754338 systemd[1]: Reached target nss-lookup.target. Jul 15 11:26:39.754345 kernel: bridge: filtering via arp/ip/ip6tables is no longer available by default. Update your scripts to load br_netfilter if you need this. Jul 15 11:26:39.754351 kernel: Bridge firewalling registered Jul 15 11:26:39.754357 kernel: SCSI subsystem initialized Jul 15 11:26:39.754367 systemd-journald[217]: Journal started Jul 15 11:26:39.754402 systemd-journald[217]: Runtime Journal (/run/log/journal/ef967b7b16e845ab8c31508bdcdef478) is 4.8M, max 38.8M, 34.0M free. Jul 15 11:26:39.675000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.688000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-tmpfiles-setup-dev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.698000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.723000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.753000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.755580 systemd[1]: Started systemd-journald.service. Jul 15 11:26:39.755592 kernel: audit: type=1130 audit(1752578799.753:6): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.676722 systemd-modules-load[218]: Inserted module 'overlay' Jul 15 11:26:39.719423 systemd-resolved[219]: Positive Trust Anchors: Jul 15 11:26:39.719428 systemd-resolved[219]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:26:39.719448 systemd-resolved[219]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:26:39.722044 systemd-resolved[219]: Defaulting to hostname 'linux'. Jul 15 11:26:39.737280 systemd-modules-load[218]: Inserted module 'br_netfilter' Jul 15 11:26:39.759813 dracut-cmdline[235]: dracut-dracut-053 Jul 15 11:26:39.759813 dracut-cmdline[235]: Using kernel command line parameters: rd.driver.pre=btrfs rootflags=rw mount.usrflags=ro BOOT_IMAGE=/flatcar/vmlinuz-a mount.usr=/dev/mapper/usr verity.usr=PARTUUID=7130c94a-213a-4e5a-8e26-6cce9662f132 rootflags=rw mount.usrflags=ro consoleblank=0 root=LA Jul 15 11:26:39.759813 dracut-cmdline[235]: BEL=ROOT console=ttyS0,115200n8 console=tty0 flatcar.first_boot=detected flatcar.oem.id=vmware flatcar.autologin verity.usrhash=3fdbb2e3469f90ee764ea38c6fc4332d45967696e3c4fd4a8c65f8d0125b235b Jul 15 11:26:39.765576 kernel: device-mapper: core: CONFIG_IMA_DISABLE_HTABLE is disabled. Duplicate IMA measurements will not be recorded in the IMA log. Jul 15 11:26:39.765616 kernel: device-mapper: uevent: version 1.0.3 Jul 15 11:26:39.765625 kernel: device-mapper: ioctl: 4.45.0-ioctl (2021-03-22) initialised: dm-devel@redhat.com Jul 15 11:26:39.768763 systemd-modules-load[218]: Inserted module 'dm_multipath' Jul 15 11:26:39.769161 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:26:39.767000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.771764 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:26:39.774872 kernel: audit: type=1130 audit(1752578799.767:7): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.775617 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:26:39.774000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.778572 kernel: audit: type=1130 audit(1752578799.774:8): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.787576 kernel: Loading iSCSI transport class v2.0-870. Jul 15 11:26:39.799577 kernel: iscsi: registered transport (tcp) Jul 15 11:26:39.816577 kernel: iscsi: registered transport (qla4xxx) Jul 15 11:26:39.816611 kernel: QLogic iSCSI HBA Driver Jul 15 11:26:39.834291 systemd[1]: Finished dracut-cmdline.service. Jul 15 11:26:39.832000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.834919 systemd[1]: Starting dracut-pre-udev.service... Jul 15 11:26:39.837798 kernel: audit: type=1130 audit(1752578799.832:9): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:39.872577 kernel: raid6: avx2x4 gen() 47978 MB/s Jul 15 11:26:39.889576 kernel: raid6: avx2x4 xor() 19587 MB/s Jul 15 11:26:39.906579 kernel: raid6: avx2x2 gen() 49964 MB/s Jul 15 11:26:39.923578 kernel: raid6: avx2x2 xor() 31812 MB/s Jul 15 11:26:39.940576 kernel: raid6: avx2x1 gen() 44626 MB/s Jul 15 11:26:39.957576 kernel: raid6: avx2x1 xor() 25814 MB/s Jul 15 11:26:39.974585 kernel: raid6: sse2x4 gen() 21067 MB/s Jul 15 11:26:39.991615 kernel: raid6: sse2x4 xor() 11716 MB/s Jul 15 11:26:40.008593 kernel: raid6: sse2x2 gen() 21008 MB/s Jul 15 11:26:40.025578 kernel: raid6: sse2x2 xor() 13174 MB/s Jul 15 11:26:40.042576 kernel: raid6: sse2x1 gen() 18181 MB/s Jul 15 11:26:40.059849 kernel: raid6: sse2x1 xor() 8832 MB/s Jul 15 11:26:40.059894 kernel: raid6: using algorithm avx2x2 gen() 49964 MB/s Jul 15 11:26:40.059908 kernel: raid6: .... xor() 31812 MB/s, rmw enabled Jul 15 11:26:40.061189 kernel: raid6: using avx2x2 recovery algorithm Jul 15 11:26:40.069577 kernel: xor: automatically using best checksumming function avx Jul 15 11:26:40.135651 kernel: Btrfs loaded, crc32c=crc32c-intel, zoned=no, fsverity=no Jul 15 11:26:40.140854 systemd[1]: Finished dracut-pre-udev.service. Jul 15 11:26:40.139000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:40.141548 systemd[1]: Starting systemd-udevd.service... Jul 15 11:26:40.144693 kernel: audit: type=1130 audit(1752578800.139:10): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:40.139000 audit: BPF prog-id=7 op=LOAD Jul 15 11:26:40.139000 audit: BPF prog-id=8 op=LOAD Jul 15 11:26:40.152943 systemd-udevd[418]: Using default interface naming scheme 'v252'. Jul 15 11:26:40.156349 systemd[1]: Started systemd-udevd.service. Jul 15 11:26:40.157000 systemd[1]: Starting dracut-pre-trigger.service... Jul 15 11:26:40.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:40.165701 dracut-pre-trigger[423]: rd.md=0: removing MD RAID activation Jul 15 11:26:40.183000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:40.184504 systemd[1]: Finished dracut-pre-trigger.service. Jul 15 11:26:40.185098 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:26:40.251000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:40.253042 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:26:40.316692 kernel: VMware PVSCSI driver - version 1.0.7.0-k Jul 15 11:26:40.316730 kernel: vmw_pvscsi: using 64bit dma Jul 15 11:26:40.316744 kernel: vmw_pvscsi: max_id: 16 Jul 15 11:26:40.316756 kernel: vmw_pvscsi: setting ring_pages to 8 Jul 15 11:26:40.326777 kernel: vmw_pvscsi: enabling reqCallThreshold Jul 15 11:26:40.326811 kernel: vmw_pvscsi: driver-based request coalescing enabled Jul 15 11:26:40.326824 kernel: vmw_pvscsi: using MSI-X Jul 15 11:26:40.326836 kernel: scsi host0: VMware PVSCSI storage adapter rev 2, req/cmp/msg rings: 8/8/1 pages, cmd_per_lun=254 Jul 15 11:26:40.328089 kernel: vmw_pvscsi 0000:03:00.0: VMware PVSCSI rev 2 host #0 Jul 15 11:26:40.332031 kernel: scsi 0:0:0:0: Direct-Access VMware Virtual disk 2.0 PQ: 0 ANSI: 6 Jul 15 11:26:40.349634 kernel: cryptd: max_cpu_qlen set to 1000 Jul 15 11:26:40.356581 kernel: VMware vmxnet3 virtual NIC driver - version 1.6.0.0-k-NAPI Jul 15 11:26:40.359583 kernel: vmxnet3 0000:0b:00.0: # of Tx queues : 2, # of Rx queues : 2 Jul 15 11:26:40.366060 kernel: libata version 3.00 loaded. Jul 15 11:26:40.366076 kernel: AVX2 version of gcm_enc/dec engaged. Jul 15 11:26:40.366085 kernel: AES CTR mode by8 optimization enabled Jul 15 11:26:40.366102 kernel: vmxnet3 0000:0b:00.0 eth0: NIC Link is Up 10000 Mbps Jul 15 11:26:40.366206 kernel: ata_piix 0000:00:07.1: version 2.13 Jul 15 11:26:40.368751 kernel: scsi host1: ata_piix Jul 15 11:26:40.368827 kernel: vmxnet3 0000:0b:00.0 ens192: renamed from eth0 Jul 15 11:26:40.368905 kernel: scsi host2: ata_piix Jul 15 11:26:40.368973 kernel: ata1: PATA max UDMA/33 cmd 0x1f0 ctl 0x3f6 bmdma 0x1060 irq 14 Jul 15 11:26:40.368982 kernel: ata2: PATA max UDMA/33 cmd 0x170 ctl 0x376 bmdma 0x1068 irq 15 Jul 15 11:26:40.532594 kernel: ata2.00: ATAPI: VMware Virtual IDE CDROM Drive, 00000001, max UDMA/33 Jul 15 11:26:40.538596 kernel: scsi 2:0:0:0: CD-ROM NECVMWar VMware IDE CDR10 1.00 PQ: 0 ANSI: 5 Jul 15 11:26:40.548197 kernel: sd 0:0:0:0: [sda] 17805312 512-byte logical blocks: (9.12 GB/8.49 GiB) Jul 15 11:26:40.600914 kernel: sd 0:0:0:0: [sda] Write Protect is off Jul 15 11:26:40.601015 kernel: sd 0:0:0:0: [sda] Mode Sense: 31 00 00 00 Jul 15 11:26:40.601116 kernel: sd 0:0:0:0: [sda] Cache data unavailable Jul 15 11:26:40.601198 kernel: sd 0:0:0:0: [sda] Assuming drive cache: write through Jul 15 11:26:40.601278 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 15 11:26:40.601296 kernel: sd 0:0:0:0: [sda] Attached SCSI disk Jul 15 11:26:40.622225 kernel: sr 2:0:0:0: [sr0] scsi3-mmc drive: 1x/1x writer dvd-ram cd/rw xa/form2 cdda tray Jul 15 11:26:40.639010 kernel: cdrom: Uniform CD-ROM driver Revision: 3.20 Jul 15 11:26:40.639027 kernel: sr 2:0:0:0: Attached scsi CD-ROM sr0 Jul 15 11:26:40.659113 systemd[1]: Found device dev-disk-by\x2dlabel-ROOT.device. Jul 15 11:26:40.661497 systemd[1]: Found device dev-disk-by\x2dlabel-EFI\x2dSYSTEM.device. Jul 15 11:26:40.666225 systemd[1]: Found device dev-disk-by\x2dpartlabel-USR\x2dA.device. Jul 15 11:26:40.667156 systemd[1]: Found device dev-disk-by\x2dpartuuid-7130c94a\x2d213a\x2d4e5a\x2d8e26\x2d6cce9662f132.device. Jul 15 11:26:40.667579 kernel: BTRFS: device label OEM devid 1 transid 9 /dev/sda6 scanned by (udev-worker) (473) Jul 15 11:26:40.669706 systemd[1]: Starting disk-uuid.service... Jul 15 11:26:40.675004 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:26:40.738602 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 15 11:26:40.761025 kernel: GPT:disk_guids don't match. Jul 15 11:26:40.761065 kernel: GPT: Use GNU Parted to correct GPT errors. Jul 15 11:26:40.761074 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 15 11:26:41.765730 kernel: sda: sda1 sda2 sda3 sda4 sda6 sda7 sda9 Jul 15 11:26:41.765766 disk-uuid[551]: The operation has completed successfully. Jul 15 11:26:41.811042 systemd[1]: disk-uuid.service: Deactivated successfully. Jul 15 11:26:41.811362 systemd[1]: Finished disk-uuid.service. Jul 15 11:26:41.810000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:41.810000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=disk-uuid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:41.812274 systemd[1]: Starting verity-setup.service... Jul 15 11:26:41.823583 kernel: device-mapper: verity: sha256 using implementation "sha256-avx2" Jul 15 11:26:41.920382 systemd[1]: Found device dev-mapper-usr.device. Jul 15 11:26:41.921236 systemd[1]: Mounting sysusr-usr.mount... Jul 15 11:26:41.921665 systemd[1]: Finished verity-setup.service. Jul 15 11:26:41.920000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:41.991150 systemd[1]: Mounted sysusr-usr.mount. Jul 15 11:26:41.991572 kernel: EXT4-fs (dm-0): mounted filesystem without journal. Opts: norecovery. Quota mode: none. Jul 15 11:26:41.991741 systemd[1]: Starting afterburn-network-kargs.service... Jul 15 11:26:41.992196 systemd[1]: Starting ignition-setup.service... Jul 15 11:26:42.027712 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:26:42.027747 kernel: BTRFS info (device sda6): using free space tree Jul 15 11:26:42.027756 kernel: BTRFS info (device sda6): has skinny extents Jul 15 11:26:42.034580 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 15 11:26:42.040997 systemd[1]: mnt-oem.mount: Deactivated successfully. Jul 15 11:26:42.046149 systemd[1]: Finished ignition-setup.service. Jul 15 11:26:42.044000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.047079 systemd[1]: Starting ignition-fetch-offline.service... Jul 15 11:26:42.146000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.148225 systemd[1]: Finished afterburn-network-kargs.service. Jul 15 11:26:42.149105 systemd[1]: Starting parse-ip-for-networkd.service... Jul 15 11:26:42.198000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.199000 audit: BPF prog-id=9 op=LOAD Jul 15 11:26:42.200283 systemd[1]: Finished parse-ip-for-networkd.service. Jul 15 11:26:42.201255 systemd[1]: Starting systemd-networkd.service... Jul 15 11:26:42.216395 systemd-networkd[736]: lo: Link UP Jul 15 11:26:42.216403 systemd-networkd[736]: lo: Gained carrier Jul 15 11:26:42.216755 systemd-networkd[736]: Enumeration completed Jul 15 11:26:42.217001 systemd-networkd[736]: ens192: Configuring with /etc/systemd/network/10-dracut-cmdline-99.network. Jul 15 11:26:42.222074 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 15 11:26:42.222205 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 15 11:26:42.216000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.217788 systemd[1]: Started systemd-networkd.service. Jul 15 11:26:42.217973 systemd[1]: Reached target network.target. Jul 15 11:26:42.218598 systemd[1]: Starting iscsiuio.service... Jul 15 11:26:42.220125 systemd-networkd[736]: ens192: Link UP Jul 15 11:26:42.220127 systemd-networkd[736]: ens192: Gained carrier Jul 15 11:26:42.225401 systemd[1]: Started iscsiuio.service. Jul 15 11:26:42.224000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.226146 systemd[1]: Starting iscsid.service... Jul 15 11:26:42.228083 iscsid[741]: iscsid: can't open InitiatorName configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:26:42.228083 iscsid[741]: iscsid: Warning: InitiatorName file /etc/iscsi/initiatorname.iscsi does not exist or does not contain a properly formatted InitiatorName. If using software iscsi (iscsi_tcp or ib_iser) or partial offload (bnx2i or cxgbi iscsi), you may not be able to log into or discover targets. Please create a file /etc/iscsi/initiatorname.iscsi that contains a sting with the format: InitiatorName=iqn.yyyy-mm.[:identifier]. Jul 15 11:26:42.228083 iscsid[741]: Example: InitiatorName=iqn.2001-04.com.redhat:fc6. Jul 15 11:26:42.228083 iscsid[741]: If using hardware iscsi like qla4xxx this message can be ignored. Jul 15 11:26:42.228083 iscsid[741]: iscsid: can't open InitiatorAlias configuration file /etc/iscsi/initiatorname.iscsi Jul 15 11:26:42.229079 iscsid[741]: iscsid: can't open iscsid.safe_logout configuration file /etc/iscsi/iscsid.conf Jul 15 11:26:42.228978 systemd[1]: Started iscsid.service. Jul 15 11:26:42.227000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.229591 systemd[1]: Starting dracut-initqueue.service... Jul 15 11:26:42.235983 systemd[1]: Finished dracut-initqueue.service. Jul 15 11:26:42.234000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.236265 systemd[1]: Reached target remote-fs-pre.target. Jul 15 11:26:42.236501 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:26:42.236719 systemd[1]: Reached target remote-fs.target. Jul 15 11:26:42.237327 systemd[1]: Starting dracut-pre-mount.service... Jul 15 11:26:42.242185 systemd[1]: Finished dracut-pre-mount.service. Jul 15 11:26:42.240000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.297510 ignition[608]: Ignition 2.14.0 Jul 15 11:26:42.297521 ignition[608]: Stage: fetch-offline Jul 15 11:26:42.297585 ignition[608]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:26:42.297609 ignition[608]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:26:42.300387 ignition[608]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:26:42.300463 ignition[608]: parsed url from cmdline: "" Jul 15 11:26:42.300465 ignition[608]: no config URL provided Jul 15 11:26:42.300469 ignition[608]: reading system config file "/usr/lib/ignition/user.ign" Jul 15 11:26:42.300473 ignition[608]: no config at "/usr/lib/ignition/user.ign" Jul 15 11:26:42.308559 ignition[608]: config successfully fetched Jul 15 11:26:42.308688 ignition[608]: parsing config with SHA512: 4284e8ce8ef51ad9d5f79e15a5a22bdb9b755072e71e2949b239f89c2af30babf5634ffd2409f25d3ea48870478a3ec8435931ff5987d566bddf34e6f56b0a8a Jul 15 11:26:42.314378 unknown[608]: fetched base config from "system" Jul 15 11:26:42.314585 unknown[608]: fetched user config from "vmware" Jul 15 11:26:42.315066 ignition[608]: fetch-offline: fetch-offline passed Jul 15 11:26:42.315237 ignition[608]: Ignition finished successfully Jul 15 11:26:42.314000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.315958 systemd[1]: Finished ignition-fetch-offline.service. Jul 15 11:26:42.316111 systemd[1]: ignition-fetch.service was skipped because of an unmet condition check (ConditionPathExists=!/run/ignition.json). Jul 15 11:26:42.316590 systemd[1]: Starting ignition-kargs.service... Jul 15 11:26:42.322661 ignition[756]: Ignition 2.14.0 Jul 15 11:26:42.322669 ignition[756]: Stage: kargs Jul 15 11:26:42.322744 ignition[756]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:26:42.322759 ignition[756]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:26:42.324211 ignition[756]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:26:42.325826 ignition[756]: kargs: kargs passed Jul 15 11:26:42.325859 ignition[756]: Ignition finished successfully Jul 15 11:26:42.325000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.326937 systemd[1]: Finished ignition-kargs.service. Jul 15 11:26:42.327627 systemd[1]: Starting ignition-disks.service... Jul 15 11:26:42.332453 ignition[762]: Ignition 2.14.0 Jul 15 11:26:42.332798 ignition[762]: Stage: disks Jul 15 11:26:42.332996 ignition[762]: reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:26:42.333161 ignition[762]: parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:26:42.334655 ignition[762]: no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:26:42.336380 ignition[762]: disks: disks passed Jul 15 11:26:42.336425 ignition[762]: Ignition finished successfully Jul 15 11:26:42.335000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.337176 systemd[1]: Finished ignition-disks.service. Jul 15 11:26:42.337356 systemd[1]: Reached target initrd-root-device.target. Jul 15 11:26:42.337451 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:26:42.337542 systemd[1]: Reached target local-fs.target. Jul 15 11:26:42.337660 systemd[1]: Reached target sysinit.target. Jul 15 11:26:42.337740 systemd[1]: Reached target basic.target. Jul 15 11:26:42.338418 systemd[1]: Starting systemd-fsck-root.service... Jul 15 11:26:42.372755 systemd-fsck[770]: ROOT: clean, 619/1628000 files, 124060/1617920 blocks Jul 15 11:26:42.376926 systemd[1]: Finished systemd-fsck-root.service. Jul 15 11:26:42.375000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.377505 systemd[1]: Mounting sysroot.mount... Jul 15 11:26:42.416585 kernel: EXT4-fs (sda9): mounted filesystem with ordered data mode. Opts: (null). Quota mode: none. Jul 15 11:26:42.416646 systemd[1]: Mounted sysroot.mount. Jul 15 11:26:42.416803 systemd[1]: Reached target initrd-root-fs.target. Jul 15 11:26:42.417656 systemd[1]: Mounting sysroot-usr.mount... Jul 15 11:26:42.418029 systemd[1]: flatcar-metadata-hostname.service was skipped because no trigger condition checks were met. Jul 15 11:26:42.418062 systemd[1]: ignition-remount-sysroot.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/sysroot). Jul 15 11:26:42.418076 systemd[1]: Reached target ignition-diskful.target. Jul 15 11:26:42.420558 systemd[1]: Mounted sysroot-usr.mount. Jul 15 11:26:42.421142 systemd[1]: Starting initrd-setup-root.service... Jul 15 11:26:42.424398 initrd-setup-root[780]: cut: /sysroot/etc/passwd: No such file or directory Jul 15 11:26:42.428361 initrd-setup-root[788]: cut: /sysroot/etc/group: No such file or directory Jul 15 11:26:42.430940 initrd-setup-root[796]: cut: /sysroot/etc/shadow: No such file or directory Jul 15 11:26:42.434196 initrd-setup-root[804]: cut: /sysroot/etc/gshadow: No such file or directory Jul 15 11:26:42.494331 systemd[1]: Finished initrd-setup-root.service. Jul 15 11:26:42.492000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.494936 systemd[1]: Starting ignition-mount.service... Jul 15 11:26:42.495390 systemd[1]: Starting sysroot-boot.service... Jul 15 11:26:42.498910 bash[821]: umount: /sysroot/usr/share/oem: not mounted. Jul 15 11:26:42.503794 ignition[822]: INFO : Ignition 2.14.0 Jul 15 11:26:42.503794 ignition[822]: INFO : Stage: mount Jul 15 11:26:42.504094 ignition[822]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:26:42.504094 ignition[822]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:26:42.505118 ignition[822]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:26:42.506490 ignition[822]: INFO : mount: mount passed Jul 15 11:26:42.506614 ignition[822]: INFO : Ignition finished successfully Jul 15 11:26:42.507125 systemd[1]: Finished ignition-mount.service. Jul 15 11:26:42.505000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.524217 systemd[1]: Finished sysroot-boot.service. Jul 15 11:26:42.522000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:42.937451 systemd[1]: Mounting sysroot-usr-share-oem.mount... Jul 15 11:26:42.945587 kernel: BTRFS: device label OEM devid 1 transid 11 /dev/sda6 scanned by mount (831) Jul 15 11:26:42.948084 kernel: BTRFS info (device sda6): using crc32c (crc32c-intel) checksum algorithm Jul 15 11:26:42.948129 kernel: BTRFS info (device sda6): using free space tree Jul 15 11:26:42.948138 kernel: BTRFS info (device sda6): has skinny extents Jul 15 11:26:42.952586 kernel: BTRFS info (device sda6): enabling ssd optimizations Jul 15 11:26:42.967022 systemd[1]: Mounted sysroot-usr-share-oem.mount. Jul 15 11:26:42.967613 systemd[1]: Starting ignition-files.service... Jul 15 11:26:42.977003 ignition[851]: INFO : Ignition 2.14.0 Jul 15 11:26:42.977003 ignition[851]: INFO : Stage: files Jul 15 11:26:42.977323 ignition[851]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:26:42.977323 ignition[851]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:26:42.978361 ignition[851]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:26:42.984569 ignition[851]: DEBUG : files: compiled without relabeling support, skipping Jul 15 11:26:42.991049 ignition[851]: INFO : files: ensureUsers: op(1): [started] creating or modifying user "core" Jul 15 11:26:42.991049 ignition[851]: DEBUG : files: ensureUsers: op(1): executing: "usermod" "--root" "/sysroot" "core" Jul 15 11:26:42.998874 ignition[851]: INFO : files: ensureUsers: op(1): [finished] creating or modifying user "core" Jul 15 11:26:42.999055 ignition[851]: INFO : files: ensureUsers: op(2): [started] adding ssh keys to user "core" Jul 15 11:26:42.999978 unknown[851]: wrote ssh authorized keys file for user: core Jul 15 11:26:43.000193 ignition[851]: INFO : files: ensureUsers: op(2): [finished] adding ssh keys to user "core" Jul 15 11:26:43.000576 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(3): [started] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 15 11:26:43.000752 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET https://get.helm.sh/helm-v3.17.3-linux-amd64.tar.gz: attempt #1 Jul 15 11:26:43.038428 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(3): GET result: OK Jul 15 11:26:43.288727 systemd-networkd[736]: ens192: Gained IPv6LL Jul 15 11:26:43.860211 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(3): [finished] writing file "/sysroot/opt/helm-v3.17.3-linux-amd64.tar.gz" Jul 15 11:26:43.860467 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(4): [started] writing file "/sysroot/home/core/install.sh" Jul 15 11:26:43.860467 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(4): [finished] writing file "/sysroot/home/core/install.sh" Jul 15 11:26:43.860467 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(5): [started] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:26:43.860467 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(5): [finished] writing file "/sysroot/home/core/nginx.yaml" Jul 15 11:26:43.860467 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(6): [started] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:26:43.861256 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(6): [finished] writing file "/sysroot/home/core/nfs-pod.yaml" Jul 15 11:26:43.861256 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(7): [started] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:26:43.861256 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(7): [finished] writing file "/sysroot/home/core/nfs-pvc.yaml" Jul 15 11:26:43.864534 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(8): [started] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:26:43.864720 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(8): [finished] writing file "/sysroot/etc/flatcar/update.conf" Jul 15 11:26:43.864720 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(9): [started] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:26:43.864720 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(9): [finished] writing link "/sysroot/etc/extensions/kubernetes.raw" -> "/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:26:43.867758 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(a): [started] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 15 11:26:43.867943 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(a): oem config not found in "/usr/share/oem", looking on oem partition Jul 15 11:26:43.870900 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(b): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem461882604" Jul 15 11:26:43.871089 ignition[851]: CRITICAL : files: createFilesystemsFiles: createFiles: op(a): op(b): [failed] mounting "/dev/disk/by-label/OEM" at "/mnt/oem461882604": device or resource busy Jul 15 11:26:43.871089 ignition[851]: ERROR : files: createFilesystemsFiles: createFiles: op(a): failed to mount ext4 device "/dev/disk/by-label/OEM" at "/mnt/oem461882604", trying btrfs: device or resource busy Jul 15 11:26:43.871089 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [started] mounting "/dev/disk/by-label/OEM" at "/mnt/oem461882604" Jul 15 11:26:43.872399 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(c): [finished] mounting "/dev/disk/by-label/OEM" at "/mnt/oem461882604" Jul 15 11:26:43.879112 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [started] unmounting "/mnt/oem461882604" Jul 15 11:26:43.879867 systemd[1]: mnt-oem461882604.mount: Deactivated successfully. Jul 15 11:26:43.880484 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(a): op(d): [finished] unmounting "/mnt/oem461882604" Jul 15 11:26:43.880484 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(a): [finished] writing file "/sysroot/etc/systemd/system/vmtoolsd.service" Jul 15 11:26:43.880484 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(e): [started] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:26:43.880484 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET https://extensions.flatcar.org/extensions/kubernetes-v1.33.0-x86-64.raw: attempt #1 Jul 15 11:26:44.706683 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(e): GET result: OK Jul 15 11:26:45.442159 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(e): [finished] writing file "/sysroot/opt/extensions/kubernetes/kubernetes-v1.33.0-x86-64.raw" Jul 15 11:26:45.445543 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(f): [started] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 15 11:26:45.445732 ignition[851]: INFO : files: createFilesystemsFiles: createFiles: op(f): [finished] writing file "/sysroot/etc/systemd/network/00-vmware.network" Jul 15 11:26:45.445732 ignition[851]: INFO : files: op(10): [started] processing unit "vmtoolsd.service" Jul 15 11:26:45.445732 ignition[851]: INFO : files: op(10): [finished] processing unit "vmtoolsd.service" Jul 15 11:26:45.445732 ignition[851]: INFO : files: op(11): [started] processing unit "prepare-helm.service" Jul 15 11:26:45.445732 ignition[851]: INFO : files: op(11): op(12): [started] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:26:45.445732 ignition[851]: INFO : files: op(11): op(12): [finished] writing unit "prepare-helm.service" at "/sysroot/etc/systemd/system/prepare-helm.service" Jul 15 11:26:45.445732 ignition[851]: INFO : files: op(11): [finished] processing unit "prepare-helm.service" Jul 15 11:26:45.445732 ignition[851]: INFO : files: op(13): [started] processing unit "coreos-metadata.service" Jul 15 11:26:45.445732 ignition[851]: INFO : files: op(13): op(14): [started] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:26:45.447164 ignition[851]: INFO : files: op(13): op(14): [finished] writing unit "coreos-metadata.service" at "/sysroot/etc/systemd/system/coreos-metadata.service" Jul 15 11:26:45.447164 ignition[851]: INFO : files: op(13): [finished] processing unit "coreos-metadata.service" Jul 15 11:26:45.447164 ignition[851]: INFO : files: op(15): [started] setting preset to enabled for "vmtoolsd.service" Jul 15 11:26:45.447164 ignition[851]: INFO : files: op(15): [finished] setting preset to enabled for "vmtoolsd.service" Jul 15 11:26:45.447164 ignition[851]: INFO : files: op(16): [started] setting preset to enabled for "prepare-helm.service" Jul 15 11:26:45.447164 ignition[851]: INFO : files: op(16): [finished] setting preset to enabled for "prepare-helm.service" Jul 15 11:26:45.447164 ignition[851]: INFO : files: op(17): [started] setting preset to disabled for "coreos-metadata.service" Jul 15 11:26:45.447164 ignition[851]: INFO : files: op(17): op(18): [started] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:26:46.139780 ignition[851]: INFO : files: op(17): op(18): [finished] removing enablement symlink(s) for "coreos-metadata.service" Jul 15 11:26:46.140156 ignition[851]: INFO : files: op(17): [finished] setting preset to disabled for "coreos-metadata.service" Jul 15 11:26:46.140416 ignition[851]: INFO : files: createResultFile: createFiles: op(19): [started] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:26:46.140677 ignition[851]: INFO : files: createResultFile: createFiles: op(19): [finished] writing file "/sysroot/etc/.ignition-result.json" Jul 15 11:26:46.140857 ignition[851]: INFO : files: files passed Jul 15 11:26:46.140991 ignition[851]: INFO : Ignition finished successfully Jul 15 11:26:46.141805 systemd[1]: Finished ignition-files.service. Jul 15 11:26:46.140000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.143317 systemd[1]: Starting initrd-setup-root-after-ignition.service... Jul 15 11:26:46.146950 kernel: kauditd_printk_skb: 24 callbacks suppressed Jul 15 11:26:46.146968 kernel: audit: type=1130 audit(1752578806.140:35): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.143446 systemd[1]: torcx-profile-populate.service was skipped because of an unmet condition check (ConditionPathExists=/sysroot/etc/torcx/next-profile). Jul 15 11:26:46.146809 systemd[1]: Starting ignition-quench.service... Jul 15 11:26:46.155586 initrd-setup-root-after-ignition[877]: grep: /sysroot/etc/flatcar/enabled-sysext.conf: No such file or directory Jul 15 11:26:46.154000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.156288 systemd[1]: Finished initrd-setup-root-after-ignition.service. Jul 15 11:26:46.156469 systemd[1]: Reached target ignition-complete.target. Jul 15 11:26:46.159580 kernel: audit: type=1130 audit(1752578806.154:36): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.159752 systemd[1]: Starting initrd-parse-etc.service... Jul 15 11:26:46.162128 systemd[1]: ignition-quench.service: Deactivated successfully. Jul 15 11:26:46.162183 systemd[1]: Finished ignition-quench.service. Jul 15 11:26:46.160000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.168147 kernel: audit: type=1130 audit(1752578806.160:37): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.168171 kernel: audit: type=1131 audit(1752578806.160:38): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.160000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-quench comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.171078 systemd[1]: initrd-parse-etc.service: Deactivated successfully. Jul 15 11:26:46.171133 systemd[1]: Finished initrd-parse-etc.service. Jul 15 11:26:46.169000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.171550 systemd[1]: Reached target initrd-fs.target. Jul 15 11:26:46.176671 kernel: audit: type=1130 audit(1752578806.169:39): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.176684 kernel: audit: type=1131 audit(1752578806.169:40): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.169000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-parse-etc comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.176266 systemd[1]: Reached target initrd.target. Jul 15 11:26:46.176370 systemd[1]: dracut-mount.service was skipped because no trigger condition checks were met. Jul 15 11:26:46.177177 systemd[1]: Starting dracut-pre-pivot.service... Jul 15 11:26:46.183592 systemd[1]: Finished dracut-pre-pivot.service. Jul 15 11:26:46.182000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.184219 systemd[1]: Starting initrd-cleanup.service... Jul 15 11:26:46.186690 kernel: audit: type=1130 audit(1752578806.182:41): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.191069 systemd[1]: initrd-cleanup.service: Deactivated successfully. Jul 15 11:26:46.191117 systemd[1]: Finished initrd-cleanup.service. Jul 15 11:26:46.189000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.191672 systemd[1]: Stopped target nss-lookup.target. Jul 15 11:26:46.196207 kernel: audit: type=1130 audit(1752578806.189:42): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.196221 kernel: audit: type=1131 audit(1752578806.189:43): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.189000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.196277 systemd[1]: Stopped target remote-cryptsetup.target. Jul 15 11:26:46.196504 systemd[1]: Stopped target timers.target. Jul 15 11:26:46.196750 systemd[1]: dracut-pre-pivot.service: Deactivated successfully. Jul 15 11:26:46.196902 systemd[1]: Stopped dracut-pre-pivot.service. Jul 15 11:26:46.195000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.197176 systemd[1]: Stopped target initrd.target. Jul 15 11:26:46.199572 kernel: audit: type=1131 audit(1752578806.195:44): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-pivot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.199658 systemd[1]: Stopped target basic.target. Jul 15 11:26:46.199757 systemd[1]: Stopped target ignition-complete.target. Jul 15 11:26:46.199915 systemd[1]: Stopped target ignition-diskful.target. Jul 15 11:26:46.200079 systemd[1]: Stopped target initrd-root-device.target. Jul 15 11:26:46.200248 systemd[1]: Stopped target remote-fs.target. Jul 15 11:26:46.200406 systemd[1]: Stopped target remote-fs-pre.target. Jul 15 11:26:46.200581 systemd[1]: Stopped target sysinit.target. Jul 15 11:26:46.200737 systemd[1]: Stopped target local-fs.target. Jul 15 11:26:46.200885 systemd[1]: Stopped target local-fs-pre.target. Jul 15 11:26:46.201038 systemd[1]: Stopped target swap.target. Jul 15 11:26:46.201199 systemd[1]: dracut-pre-mount.service: Deactivated successfully. Jul 15 11:26:46.199000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.201224 systemd[1]: Stopped dracut-pre-mount.service. Jul 15 11:26:46.201374 systemd[1]: Stopped target cryptsetup.target. Jul 15 11:26:46.200000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-initqueue comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.201524 systemd[1]: dracut-initqueue.service: Deactivated successfully. Jul 15 11:26:46.200000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-fetch-offline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.201545 systemd[1]: Stopped dracut-initqueue.service. Jul 15 11:26:46.201740 systemd[1]: ignition-fetch-offline.service: Deactivated successfully. Jul 15 11:26:46.201761 systemd[1]: Stopped ignition-fetch-offline.service. Jul 15 11:26:46.201893 systemd[1]: Stopped target paths.target. Jul 15 11:26:46.202037 systemd[1]: systemd-ask-password-console.path: Deactivated successfully. Jul 15 11:26:46.207599 systemd[1]: Stopped systemd-ask-password-console.path. Jul 15 11:26:46.207704 systemd[1]: Stopped target slices.target. Jul 15 11:26:46.207867 systemd[1]: Stopped target sockets.target. Jul 15 11:26:46.208039 systemd[1]: initrd-setup-root-after-ignition.service: Deactivated successfully. Jul 15 11:26:46.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root-after-ignition comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.208060 systemd[1]: Stopped initrd-setup-root-after-ignition.service. Jul 15 11:26:46.208205 systemd[1]: ignition-files.service: Deactivated successfully. Jul 15 11:26:46.208225 systemd[1]: Stopped ignition-files.service. Jul 15 11:26:46.208735 systemd[1]: Stopping ignition-mount.service... Jul 15 11:26:46.208965 iscsid[741]: iscsid shutting down. Jul 15 11:26:46.210622 systemd[1]: Stopping iscsid.service... Jul 15 11:26:46.210720 systemd[1]: kmod-static-nodes.service: Deactivated successfully. Jul 15 11:26:46.210748 systemd[1]: Stopped kmod-static-nodes.service. Jul 15 11:26:46.211238 systemd[1]: Stopping sysroot-boot.service... Jul 15 11:26:46.211354 systemd[1]: systemd-udev-trigger.service: Deactivated successfully. Jul 15 11:26:46.211383 systemd[1]: Stopped systemd-udev-trigger.service. Jul 15 11:26:46.211531 systemd[1]: dracut-pre-trigger.service: Deactivated successfully. Jul 15 11:26:46.211605 systemd[1]: Stopped dracut-pre-trigger.service. Jul 15 11:26:46.211889 systemd[1]: iscsid.service: Deactivated successfully. Jul 15 11:26:46.211953 systemd[1]: Stopped iscsid.service. Jul 15 11:26:46.212229 systemd[1]: iscsid.socket: Deactivated successfully. Jul 15 11:26:46.212247 systemd[1]: Closed iscsid.socket. Jul 15 11:26:46.212839 systemd[1]: Stopping iscsiuio.service... Jul 15 11:26:46.217336 ignition[890]: INFO : Ignition 2.14.0 Jul 15 11:26:46.217336 ignition[890]: INFO : Stage: umount Jul 15 11:26:46.217336 ignition[890]: INFO : reading system config file "/usr/lib/ignition/base.d/base.ign" Jul 15 11:26:46.217336 ignition[890]: DEBUG : parsing config with SHA512: bd85a898f7da4744ff98e02742aa4854e1ceea8026a4e95cb6fb599b39b54cff0db353847df13d3c55ae196a9dc5d648977228d55e5da3ea20cd600fa7cec8ed Jul 15 11:26:46.218719 systemd[1]: iscsiuio.service: Deactivated successfully. Jul 15 11:26:46.206000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-files comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.209000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.210000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsid comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.219079 ignition[890]: INFO : no config dir at "/usr/lib/ignition/base.platform.d/vmware" Jul 15 11:26:46.217000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=iscsiuio comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.218788 systemd[1]: Stopped iscsiuio.service. Jul 15 11:26:46.219117 systemd[1]: iscsiuio.socket: Deactivated successfully. Jul 15 11:26:46.219135 systemd[1]: Closed iscsiuio.socket. Jul 15 11:26:46.227385 ignition[890]: INFO : umount: umount passed Jul 15 11:26:46.227385 ignition[890]: INFO : Ignition finished successfully Jul 15 11:26:46.227812 systemd[1]: ignition-mount.service: Deactivated successfully. Jul 15 11:26:46.227860 systemd[1]: Stopped ignition-mount.service. Jul 15 11:26:46.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-mount comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.228064 systemd[1]: Stopped target network.target. Jul 15 11:26:46.228197 systemd[1]: ignition-disks.service: Deactivated successfully. Jul 15 11:26:46.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-disks comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.228221 systemd[1]: Stopped ignition-disks.service. Jul 15 11:26:46.226000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.228374 systemd[1]: ignition-kargs.service: Deactivated successfully. Jul 15 11:26:46.228395 systemd[1]: Stopped ignition-kargs.service. Jul 15 11:26:46.227000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=ignition-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.228539 systemd[1]: ignition-setup.service: Deactivated successfully. Jul 15 11:26:46.228558 systemd[1]: Stopped ignition-setup.service. Jul 15 11:26:46.228760 systemd[1]: Stopping systemd-networkd.service... Jul 15 11:26:46.229049 systemd[1]: Stopping systemd-resolved.service... Jul 15 11:26:46.233378 systemd[1]: systemd-resolved.service: Deactivated successfully. Jul 15 11:26:46.233428 systemd[1]: Stopped systemd-resolved.service. Jul 15 11:26:46.232000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.234507 systemd[1]: systemd-networkd.service: Deactivated successfully. Jul 15 11:26:46.234571 systemd[1]: Stopped systemd-networkd.service. Jul 15 11:26:46.234825 systemd[1]: systemd-networkd.socket: Deactivated successfully. Jul 15 11:26:46.234843 systemd[1]: Closed systemd-networkd.socket. Jul 15 11:26:46.233000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=parse-ip-for-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=afterburn-network-kargs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.234000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.236000 audit: BPF prog-id=6 op=UNLOAD Jul 15 11:26:46.236000 audit: BPF prog-id=9 op=UNLOAD Jul 15 11:26:46.235605 systemd[1]: Stopping network-cleanup.service... Jul 15 11:26:46.235709 systemd[1]: parse-ip-for-networkd.service: Deactivated successfully. Jul 15 11:26:46.235741 systemd[1]: Stopped parse-ip-for-networkd.service. Jul 15 11:26:46.235877 systemd[1]: afterburn-network-kargs.service: Deactivated successfully. Jul 15 11:26:46.235897 systemd[1]: Stopped afterburn-network-kargs.service. Jul 15 11:26:46.236005 systemd[1]: systemd-sysctl.service: Deactivated successfully. Jul 15 11:26:46.236025 systemd[1]: Stopped systemd-sysctl.service. Jul 15 11:26:46.236166 systemd[1]: systemd-modules-load.service: Deactivated successfully. Jul 15 11:26:46.236185 systemd[1]: Stopped systemd-modules-load.service. Jul 15 11:26:46.236325 systemd[1]: Stopping systemd-udevd.service... Jul 15 11:26:46.238071 systemd[1]: run-credentials-systemd\x2dsysctl.service.mount: Deactivated successfully. Jul 15 11:26:46.240214 systemd[1]: network-cleanup.service: Deactivated successfully. Jul 15 11:26:46.238000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=network-cleanup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.240264 systemd[1]: Stopped network-cleanup.service. Jul 15 11:26:46.241355 systemd[1]: systemd-udevd.service: Deactivated successfully. Jul 15 11:26:46.241421 systemd[1]: Stopped systemd-udevd.service. Jul 15 11:26:46.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.241815 systemd[1]: systemd-udevd-control.socket: Deactivated successfully. Jul 15 11:26:46.241839 systemd[1]: Closed systemd-udevd-control.socket. Jul 15 11:26:46.242045 systemd[1]: systemd-udevd-kernel.socket: Deactivated successfully. Jul 15 11:26:46.242062 systemd[1]: Closed systemd-udevd-kernel.socket. Jul 15 11:26:46.240000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-pre-udev comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=dracut-cmdline-ask comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.242199 systemd[1]: dracut-pre-udev.service: Deactivated successfully. Jul 15 11:26:46.242221 systemd[1]: Stopped dracut-pre-udev.service. Jul 15 11:26:46.242411 systemd[1]: dracut-cmdline.service: Deactivated successfully. Jul 15 11:26:46.241000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=systemd-vconsole-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.242430 systemd[1]: Stopped dracut-cmdline.service. Jul 15 11:26:46.242673 systemd[1]: dracut-cmdline-ask.service: Deactivated successfully. Jul 15 11:26:46.242691 systemd[1]: Stopped dracut-cmdline-ask.service. Jul 15 11:26:46.243122 systemd[1]: Starting initrd-udevadm-cleanup-db.service... Jul 15 11:26:46.243308 systemd[1]: systemd-vconsole-setup.service: Deactivated successfully. Jul 15 11:26:46.243339 systemd[1]: Stopped systemd-vconsole-setup.service. Jul 15 11:26:46.245000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.245000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-udevadm-cleanup-db comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.246887 systemd[1]: initrd-udevadm-cleanup-db.service: Deactivated successfully. Jul 15 11:26:46.246934 systemd[1]: Finished initrd-udevadm-cleanup-db.service. Jul 15 11:26:46.250546 systemd[1]: sysroot-boot.mount: Deactivated successfully. Jul 15 11:26:46.271931 systemd[1]: sysroot-boot.service: Deactivated successfully. Jul 15 11:26:46.271992 systemd[1]: Stopped sysroot-boot.service. Jul 15 11:26:46.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=sysroot-boot comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.272237 systemd[1]: Reached target initrd-switch-root.target. Jul 15 11:26:46.272373 systemd[1]: initrd-setup-root.service: Deactivated successfully. Jul 15 11:26:46.272401 systemd[1]: Stopped initrd-setup-root.service. Jul 15 11:26:46.270000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=kernel msg='unit=initrd-setup-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:46.273056 systemd[1]: Starting initrd-switch-root.service... Jul 15 11:26:46.281114 systemd[1]: Switching root. Jul 15 11:26:46.293468 systemd-journald[217]: Journal stopped Jul 15 11:26:50.004733 systemd-journald[217]: Received SIGTERM from PID 1 (systemd). Jul 15 11:26:50.004750 kernel: SELinux: Class mctp_socket not defined in policy. Jul 15 11:26:50.004758 kernel: SELinux: Class anon_inode not defined in policy. Jul 15 11:26:50.004764 kernel: SELinux: the above unknown classes and permissions will be allowed Jul 15 11:26:50.004769 kernel: SELinux: policy capability network_peer_controls=1 Jul 15 11:26:50.004776 kernel: SELinux: policy capability open_perms=1 Jul 15 11:26:50.004782 kernel: SELinux: policy capability extended_socket_class=1 Jul 15 11:26:50.004788 kernel: SELinux: policy capability always_check_network=0 Jul 15 11:26:50.004794 kernel: SELinux: policy capability cgroup_seclabel=1 Jul 15 11:26:50.004800 kernel: SELinux: policy capability nnp_nosuid_transition=1 Jul 15 11:26:50.004805 kernel: SELinux: policy capability genfs_seclabel_symlinks=0 Jul 15 11:26:50.004810 kernel: SELinux: policy capability ioctl_skip_cloexec=0 Jul 15 11:26:50.004818 systemd[1]: Successfully loaded SELinux policy in 38.483ms. Jul 15 11:26:50.004825 systemd[1]: Relabelled /dev, /dev/shm, /run, /sys/fs/cgroup in 6.448ms. Jul 15 11:26:50.004833 systemd[1]: systemd 252 running in system mode (+PAM +AUDIT +SELINUX -APPARMOR +IMA +SMACK +SECCOMP +GCRYPT -GNUTLS +OPENSSL -ACL +BLKID +CURL -ELFUTILS -FIDO2 +IDN2 -IDN +IPTC +KMOD +LIBCRYPTSETUP +LIBFDISK +PCRE2 -PWQUALITY -P11KIT -QRENCODE -TPM2 +BZIP2 +LZ4 +XZ +ZLIB +ZSTD -BPF_FRAMEWORK -XKBCOMMON +UTMP +SYSVINIT default-hierarchy=unified) Jul 15 11:26:50.004840 systemd[1]: Detected virtualization vmware. Jul 15 11:26:50.004847 systemd[1]: Detected architecture x86-64. Jul 15 11:26:50.004853 systemd[1]: Detected first boot. Jul 15 11:26:50.004860 systemd[1]: Initializing machine ID from random generator. Jul 15 11:26:50.004866 kernel: SELinux: Context system_u:object_r:container_file_t:s0:c1022,c1023 is not valid (left unmapped). Jul 15 11:26:50.004872 systemd[1]: Populated /etc with preset unit settings. Jul 15 11:26:50.004879 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:26:50.004886 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:26:50.004893 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:26:50.004901 systemd[1]: initrd-switch-root.service: Deactivated successfully. Jul 15 11:26:50.004907 systemd[1]: Stopped initrd-switch-root.service. Jul 15 11:26:50.004914 systemd[1]: systemd-journald.service: Scheduled restart job, restart counter is at 1. Jul 15 11:26:50.004921 systemd[1]: Created slice system-addon\x2dconfig.slice. Jul 15 11:26:50.004927 systemd[1]: Created slice system-addon\x2drun.slice. Jul 15 11:26:50.004934 systemd[1]: Created slice system-getty.slice. Jul 15 11:26:50.004940 systemd[1]: Created slice system-modprobe.slice. Jul 15 11:26:50.004947 systemd[1]: Created slice system-serial\x2dgetty.slice. Jul 15 11:26:50.004954 systemd[1]: Created slice system-system\x2dcloudinit.slice. Jul 15 11:26:50.004960 systemd[1]: Created slice system-systemd\x2dfsck.slice. Jul 15 11:26:50.004967 systemd[1]: Created slice user.slice. Jul 15 11:26:50.004973 systemd[1]: Started systemd-ask-password-console.path. Jul 15 11:26:50.004979 systemd[1]: Started systemd-ask-password-wall.path. Jul 15 11:26:50.004985 systemd[1]: Set up automount boot.automount. Jul 15 11:26:50.004992 systemd[1]: Set up automount proc-sys-fs-binfmt_misc.automount. Jul 15 11:26:50.004999 systemd[1]: Stopped target initrd-switch-root.target. Jul 15 11:26:50.005007 systemd[1]: Stopped target initrd-fs.target. Jul 15 11:26:50.005014 systemd[1]: Stopped target initrd-root-fs.target. Jul 15 11:26:50.005021 systemd[1]: Reached target integritysetup.target. Jul 15 11:26:50.005028 systemd[1]: Reached target remote-cryptsetup.target. Jul 15 11:26:50.005034 systemd[1]: Reached target remote-fs.target. Jul 15 11:26:50.005041 systemd[1]: Reached target slices.target. Jul 15 11:26:50.005048 systemd[1]: Reached target swap.target. Jul 15 11:26:50.005054 systemd[1]: Reached target torcx.target. Jul 15 11:26:50.005062 systemd[1]: Reached target veritysetup.target. Jul 15 11:26:50.005070 systemd[1]: Listening on systemd-coredump.socket. Jul 15 11:26:50.005076 systemd[1]: Listening on systemd-initctl.socket. Jul 15 11:26:50.005083 systemd[1]: Listening on systemd-networkd.socket. Jul 15 11:26:50.005089 systemd[1]: Listening on systemd-udevd-control.socket. Jul 15 11:26:50.005096 systemd[1]: Listening on systemd-udevd-kernel.socket. Jul 15 11:26:50.005104 systemd[1]: Listening on systemd-userdbd.socket. Jul 15 11:26:50.005111 systemd[1]: Mounting dev-hugepages.mount... Jul 15 11:26:50.005118 systemd[1]: Mounting dev-mqueue.mount... Jul 15 11:26:50.005125 systemd[1]: Mounting media.mount... Jul 15 11:26:50.005131 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:50.005138 systemd[1]: Mounting sys-kernel-debug.mount... Jul 15 11:26:50.005145 systemd[1]: Mounting sys-kernel-tracing.mount... Jul 15 11:26:50.005153 systemd[1]: Mounting tmp.mount... Jul 15 11:26:50.005160 systemd[1]: Starting flatcar-tmpfiles.service... Jul 15 11:26:50.005167 systemd[1]: Starting ignition-delete-config.service... Jul 15 11:26:50.005173 systemd[1]: Starting kmod-static-nodes.service... Jul 15 11:26:50.005180 systemd[1]: Starting modprobe@configfs.service... Jul 15 11:26:50.005187 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:26:50.005193 systemd[1]: Starting modprobe@drm.service... Jul 15 11:26:50.005200 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:26:50.005207 systemd[1]: Starting modprobe@fuse.service... Jul 15 11:26:50.005215 systemd[1]: Starting modprobe@loop.service... Jul 15 11:26:50.005222 systemd[1]: setup-nsswitch.service was skipped because of an unmet condition check (ConditionPathExists=!/etc/nsswitch.conf). Jul 15 11:26:50.005229 systemd[1]: systemd-fsck-root.service: Deactivated successfully. Jul 15 11:26:50.005236 systemd[1]: Stopped systemd-fsck-root.service. Jul 15 11:26:50.005242 systemd[1]: systemd-fsck-usr.service: Deactivated successfully. Jul 15 11:26:50.005249 systemd[1]: Stopped systemd-fsck-usr.service. Jul 15 11:26:50.005256 systemd[1]: Stopped systemd-journald.service. Jul 15 11:26:50.005263 systemd[1]: Starting systemd-journald.service... Jul 15 11:26:50.005269 systemd[1]: Starting systemd-modules-load.service... Jul 15 11:26:50.005277 systemd[1]: Starting systemd-network-generator.service... Jul 15 11:26:50.005284 systemd[1]: Starting systemd-remount-fs.service... Jul 15 11:26:50.005291 systemd[1]: Starting systemd-udev-trigger.service... Jul 15 11:26:50.005297 systemd[1]: verity-setup.service: Deactivated successfully. Jul 15 11:26:50.005304 systemd[1]: Stopped verity-setup.service. Jul 15 11:26:50.005311 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:50.005318 systemd[1]: Mounted dev-hugepages.mount. Jul 15 11:26:50.005324 systemd[1]: Mounted dev-mqueue.mount. Jul 15 11:26:50.005331 systemd[1]: Mounted media.mount. Jul 15 11:26:50.005339 systemd[1]: Mounted sys-kernel-debug.mount. Jul 15 11:26:50.005346 systemd[1]: Mounted sys-kernel-tracing.mount. Jul 15 11:26:50.005352 systemd[1]: Mounted tmp.mount. Jul 15 11:26:50.005360 systemd[1]: Finished kmod-static-nodes.service. Jul 15 11:26:50.007640 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:26:50.007651 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:26:50.007659 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:26:50.007666 systemd[1]: Finished modprobe@drm.service. Jul 15 11:26:50.007673 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:26:50.007682 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:26:50.007689 systemd[1]: Finished systemd-remount-fs.service. Jul 15 11:26:50.007696 systemd[1]: remount-root.service was skipped because of an unmet condition check (ConditionPathIsReadWrite=!/). Jul 15 11:26:50.007703 kernel: loop: module loaded Jul 15 11:26:50.007709 systemd[1]: Starting systemd-hwdb-update.service... Jul 15 11:26:50.007716 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:26:50.007723 systemd[1]: Starting systemd-random-seed.service... Jul 15 11:26:50.007730 systemd[1]: Finished flatcar-tmpfiles.service. Jul 15 11:26:50.007737 systemd[1]: modprobe@configfs.service: Deactivated successfully. Jul 15 11:26:50.007745 systemd[1]: Finished modprobe@configfs.service. Jul 15 11:26:50.007752 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:26:50.007759 systemd[1]: Finished modprobe@loop.service. Jul 15 11:26:50.007765 systemd[1]: Finished systemd-network-generator.service. Jul 15 11:26:50.007772 systemd[1]: Reached target network-pre.target. Jul 15 11:26:50.007784 systemd-journald[1002]: Journal started Jul 15 11:26:50.007814 systemd-journald[1002]: Runtime Journal (/run/log/journal/104945dd58b5446f9c5ee60fa93c570a) is 4.8M, max 38.8M, 34.0M free. Jul 15 11:26:46.479000 audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1 Jul 15 11:26:46.578000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:26:46.578000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=1 Jul 15 11:26:46.578000 audit: BPF prog-id=10 op=LOAD Jul 15 11:26:46.578000 audit: BPF prog-id=10 op=UNLOAD Jul 15 11:26:46.578000 audit: BPF prog-id=11 op=LOAD Jul 15 11:26:46.578000 audit: BPF prog-id=11 op=UNLOAD Jul 15 11:26:46.737000 audit[923]: AVC avc: denied { associate } for pid=923 comm="torcx-generator" name="docker" dev="tmpfs" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:object_r:container_file_t:s0:c1022,c1023" Jul 15 11:26:46.737000 audit[923]: SYSCALL arch=c000003e syscall=188 success=yes exit=0 a0=c00014d8b4 a1=c0000cede0 a2=c0000d7040 a3=32 items=0 ppid=906 pid=923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:46.737000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:26:46.738000 audit[923]: AVC avc: denied { associate } for pid=923 comm="torcx-generator" name="bin" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 Jul 15 11:26:46.738000 audit[923]: SYSCALL arch=c000003e syscall=258 success=yes exit=0 a0=ffffffffffffff9c a1=c00014d989 a2=1ed a3=0 items=2 ppid=906 pid=923 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="torcx-generator" exe="/usr/lib/systemd/system-generators/torcx-generator" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:46.738000 audit: CWD cwd="/" Jul 15 11:26:46.738000 audit: PATH item=0 name=(null) inode=2 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:46.738000 audit: PATH item=1 name=(null) inode=3 dev=00:1b mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:unlabeled_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:46.738000 audit: PROCTITLE proctitle=2F7573722F6C69622F73797374656D642F73797374656D2D67656E657261746F72732F746F7263782D67656E657261746F72002F72756E2F73797374656D642F67656E657261746F72002F72756E2F73797374656D642F67656E657261746F722E6561726C79002F72756E2F73797374656D642F67656E657261746F722E6C61 Jul 15 11:26:49.834000 audit: BPF prog-id=12 op=LOAD Jul 15 11:26:49.834000 audit: BPF prog-id=3 op=UNLOAD Jul 15 11:26:49.834000 audit: BPF prog-id=13 op=LOAD Jul 15 11:26:49.834000 audit: BPF prog-id=14 op=LOAD Jul 15 11:26:49.834000 audit: BPF prog-id=4 op=UNLOAD Jul 15 11:26:49.834000 audit: BPF prog-id=5 op=UNLOAD Jul 15 11:26:49.836000 audit: BPF prog-id=15 op=LOAD Jul 15 11:26:49.836000 audit: BPF prog-id=12 op=UNLOAD Jul 15 11:26:49.836000 audit: BPF prog-id=16 op=LOAD Jul 15 11:26:49.836000 audit: BPF prog-id=17 op=LOAD Jul 15 11:26:49.836000 audit: BPF prog-id=13 op=UNLOAD Jul 15 11:26:49.836000 audit: BPF prog-id=14 op=UNLOAD Jul 15 11:26:49.836000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.839000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.839000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=initrd-switch-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.847000 audit: BPF prog-id=15 op=UNLOAD Jul 15 11:26:49.919000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-root comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.921000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck-usr comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.922000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.922000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.922000 audit: BPF prog-id=18 op=LOAD Jul 15 11:26:49.923000 audit: BPF prog-id=19 op=LOAD Jul 15 11:26:49.923000 audit: BPF prog-id=20 op=LOAD Jul 15 11:26:49.923000 audit: BPF prog-id=16 op=UNLOAD Jul 15 11:26:49.923000 audit: BPF prog-id=17 op=UNLOAD Jul 15 11:26:49.952000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=verity-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.962000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kmod-static-nodes comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.965000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.965000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.966000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.966000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.968000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.010734 systemd[1]: Mounting sys-kernel-config.mount... Jul 15 11:26:50.010751 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:26:49.968000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.969000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-remount-fs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=flatcar-tmpfiles comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.001000 audit: CONFIG_CHANGE op=set audit_enabled=1 old=1 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 res=1 Jul 15 11:26:50.001000 audit[1002]: SYSCALL arch=c000003e syscall=46 success=yes exit=60 a0=5 a1=7ffc8e6178e0 a2=4000 a3=7ffc8e61797c items=0 ppid=1 pid=1002 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="systemd-journal" exe="/usr/lib/systemd/systemd-journald" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:50.001000 audit: PROCTITLE proctitle="/usr/lib/systemd/systemd-journald" Jul 15 11:26:50.001000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.001000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@configfs comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.003000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.003000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.005000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-network-generator comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:49.835014 systemd[1]: Queued start job for default target multi-user.target. Jul 15 11:26:46.735261 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:26:49.835023 systemd[1]: Unnecessary job was removed for dev-sda6.device. Jul 15 11:26:46.736040 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:26:49.838109 systemd[1]: systemd-journald.service: Deactivated successfully. Jul 15 11:26:46.736059 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:26:46.736081 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=info msg="no vendor profile selected by /etc/flatcar/docker-1.12" Jul 15 11:26:46.736087 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=debug msg="skipped missing lower profile" missing profile=oem Jul 15 11:26:46.736109 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=warning msg="no next profile: unable to read profile file: open /etc/torcx/next-profile: no such file or directory" Jul 15 11:26:46.736117 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=debug msg="apply configuration parsed" lower profiles (vendor/oem)="[vendor]" upper profile (user)= Jul 15 11:26:46.736246 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=debug msg="mounted tmpfs" target=/run/torcx/unpack Jul 15 11:26:50.011545 jq[989]: true Jul 15 11:26:46.736271 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=debug msg="profile found" name=docker-1.12-no path=/usr/share/torcx/profiles/docker-1.12-no.json Jul 15 11:26:46.736279 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=debug msg="profile found" name=vendor path=/usr/share/torcx/profiles/vendor.json Jul 15 11:26:46.737421 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:20.10.torcx.tgz" reference=20.10 Jul 15 11:26:46.737443 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=debug msg="new archive/reference added to cache" format=tgz name=docker path="/usr/share/torcx/store/docker:com.coreos.cl.torcx.tgz" reference=com.coreos.cl Jul 15 11:26:46.737455 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store/3510.3.100: no such file or directory" path=/usr/share/oem/torcx/store/3510.3.100 Jul 15 11:26:46.737463 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=info msg="store skipped" err="open /usr/share/oem/torcx/store: no such file or directory" path=/usr/share/oem/torcx/store Jul 15 11:26:46.737473 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store/3510.3.100: no such file or directory" path=/var/lib/torcx/store/3510.3.100 Jul 15 11:26:46.737485 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:46Z" level=info msg="store skipped" err="open /var/lib/torcx/store: no such file or directory" path=/var/lib/torcx/store Jul 15 11:26:49.252432 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:49Z" level=debug msg="image unpacked" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:26:49.252605 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:49Z" level=debug msg="binaries propagated" assets="[/bin/containerd /bin/containerd-shim /bin/ctr /bin/docker /bin/docker-containerd /bin/docker-containerd-shim /bin/docker-init /bin/docker-proxy /bin/docker-runc /bin/dockerd /bin/runc /bin/tini]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:26:49.252667 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:49Z" level=debug msg="networkd units propagated" assets="[/lib/systemd/network/50-docker.network /lib/systemd/network/90-docker-veth.network]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:26:49.252771 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:49Z" level=debug msg="systemd units propagated" assets="[/lib/systemd/system/containerd.service /lib/systemd/system/docker.service /lib/systemd/system/docker.socket /lib/systemd/system/sockets.target.wants /lib/systemd/system/multi-user.target.wants]" image=docker path=/run/torcx/unpack/docker reference=com.coreos.cl Jul 15 11:26:49.252803 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:49Z" level=debug msg="profile applied" sealed profile=/run/torcx/profile.json upper profile= Jul 15 11:26:49.252846 /usr/lib/systemd/system-generators/torcx-generator[923]: time="2025-07-15T11:26:49Z" level=debug msg="system state sealed" content="[TORCX_LOWER_PROFILES=\"vendor\" TORCX_UPPER_PROFILE=\"\" TORCX_PROFILE_PATH=\"/run/torcx/profile.json\" TORCX_BINDIR=\"/run/torcx/bin\" TORCX_UNPACKDIR=\"/run/torcx/unpack\"]" path=/run/metadata/torcx Jul 15 11:26:50.019123 systemd[1]: Starting systemd-sysusers.service... Jul 15 11:26:50.019155 systemd[1]: Started systemd-journald.service. Jul 15 11:26:50.019166 kernel: fuse: init (API version 7.34) Jul 15 11:26:50.019175 jq[1038]: true Jul 15 11:26:50.018000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journald comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.020725 systemd[1]: modprobe@fuse.service: Deactivated successfully. Jul 15 11:26:50.020824 systemd[1]: Finished modprobe@fuse.service. Jul 15 11:26:50.019000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.019000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@fuse comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.022083 systemd[1]: Mounted sys-kernel-config.mount. Jul 15 11:26:50.025279 systemd[1]: Mounting sys-fs-fuse-connections.mount... Jul 15 11:26:50.026084 systemd[1]: Starting systemd-journal-flush.service... Jul 15 11:26:50.027219 systemd[1]: Mounted sys-fs-fuse-connections.mount. Jul 15 11:26:50.031523 systemd[1]: Finished systemd-modules-load.service. Jul 15 11:26:50.030000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-modules-load comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.032517 systemd[1]: Starting systemd-sysctl.service... Jul 15 11:26:50.065187 systemd[1]: Finished systemd-random-seed.service. Jul 15 11:26:50.065366 systemd[1]: Reached target first-boot-complete.target. Jul 15 11:26:50.063000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-random-seed comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.071916 systemd-journald[1002]: Time spent on flushing to /var/log/journal/104945dd58b5446f9c5ee60fa93c570a is 18.437ms for 2004 entries. Jul 15 11:26:50.071916 systemd-journald[1002]: System Journal (/var/log/journal/104945dd58b5446f9c5ee60fa93c570a) is 8.0M, max 584.8M, 576.8M free. Jul 15 11:26:50.124652 systemd-journald[1002]: Received client request to flush runtime journal. Jul 15 11:26:50.122000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysctl comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.124356 systemd[1]: Finished systemd-sysctl.service. Jul 15 11:26:50.125151 systemd[1]: Finished systemd-journal-flush.service. Jul 15 11:26:50.123000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-flush comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.129000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-trigger comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.130954 systemd[1]: Finished systemd-udev-trigger.service. Jul 15 11:26:50.131880 systemd[1]: Starting systemd-udev-settle.service... Jul 15 11:26:50.142503 udevadm[1049]: systemd-udev-settle.service is deprecated. Please fix lvm2-activation.service, lvm2-activation-early.service not to pull it in. Jul 15 11:26:50.254796 systemd[1]: Finished systemd-sysusers.service. Jul 15 11:26:50.253000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysusers comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.792079 systemd[1]: Finished systemd-hwdb-update.service. Jul 15 11:26:50.790000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-hwdb-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.791000 audit: BPF prog-id=21 op=LOAD Jul 15 11:26:50.791000 audit: BPF prog-id=22 op=LOAD Jul 15 11:26:50.791000 audit: BPF prog-id=7 op=UNLOAD Jul 15 11:26:50.791000 audit: BPF prog-id=8 op=UNLOAD Jul 15 11:26:50.793185 systemd[1]: Starting systemd-udevd.service... Jul 15 11:26:50.805857 systemd-udevd[1055]: Using default interface naming scheme 'v252'. Jul 15 11:26:50.853332 ignition[1042]: Ignition 2.14.0 Jul 15 11:26:50.853962 ignition[1042]: deleting config from guestinfo properties Jul 15 11:26:50.858013 ignition[1042]: Successfully deleted config Jul 15 11:26:50.857000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ignition-delete-config comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.859256 systemd[1]: Finished ignition-delete-config.service. Jul 15 11:26:50.869000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udevd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.871260 systemd[1]: Started systemd-udevd.service. Jul 15 11:26:50.870000 audit: BPF prog-id=23 op=LOAD Jul 15 11:26:50.872822 systemd[1]: Starting systemd-networkd.service... Jul 15 11:26:50.878000 audit: BPF prog-id=24 op=LOAD Jul 15 11:26:50.878000 audit: BPF prog-id=25 op=LOAD Jul 15 11:26:50.878000 audit: BPF prog-id=26 op=LOAD Jul 15 11:26:50.880431 systemd[1]: Starting systemd-userdbd.service... Jul 15 11:26:50.915408 systemd[1]: Started systemd-userdbd.service. Jul 15 11:26:50.913000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-userdbd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.918471 systemd[1]: Condition check resulted in dev-ttyS0.device being skipped. Jul 15 11:26:50.947589 kernel: input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input2 Jul 15 11:26:50.953576 kernel: ACPI: button: Power Button [PWRF] Jul 15 11:26:50.980030 systemd-networkd[1057]: lo: Link UP Jul 15 11:26:50.980038 systemd-networkd[1057]: lo: Gained carrier Jul 15 11:26:50.980446 systemd-networkd[1057]: Enumeration completed Jul 15 11:26:50.980521 systemd[1]: Started systemd-networkd.service. Jul 15 11:26:50.979000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:50.980771 systemd-networkd[1057]: ens192: Configuring with /etc/systemd/network/00-vmware.network. Jul 15 11:26:50.984066 kernel: vmxnet3 0000:0b:00.0 ens192: intr type 3, mode 0, 3 vectors allocated Jul 15 11:26:50.985436 kernel: vmxnet3 0000:0b:00.0 ens192: NIC Link is Up 10000 Mbps Jul 15 11:26:50.985537 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): ens192: link becomes ready Jul 15 11:26:50.985412 systemd-networkd[1057]: ens192: Link UP Jul 15 11:26:50.985559 systemd-networkd[1057]: ens192: Gained carrier Jul 15 11:26:51.017521 systemd[1]: Found device dev-disk-by\x2dlabel-OEM.device. Jul 15 11:26:51.063000 audit[1059]: AVC avc: denied { confidentiality } for pid=1059 comm="(udev-worker)" lockdown_reason="use of tracefs" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=1 Jul 15 11:26:51.063000 audit[1059]: SYSCALL arch=c000003e syscall=175 success=yes exit=0 a0=561ff2e7d2f0 a1=338ac a2=7f3fee497bc5 a3=5 items=110 ppid=1055 pid=1059 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="(udev-worker)" exe="/usr/bin/udevadm" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:51.063000 audit: CWD cwd="/" Jul 15 11:26:51.063000 audit: PATH item=0 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=1 name=(null) inode=24562 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=2 name=(null) inode=24562 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=3 name=(null) inode=24563 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=4 name=(null) inode=24562 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=5 name=(null) inode=24564 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=6 name=(null) inode=24562 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=7 name=(null) inode=24565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=8 name=(null) inode=24565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=9 name=(null) inode=24566 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=10 name=(null) inode=24565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=11 name=(null) inode=24567 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=12 name=(null) inode=24565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=13 name=(null) inode=24568 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=14 name=(null) inode=24565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=15 name=(null) inode=24569 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=16 name=(null) inode=24565 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=17 name=(null) inode=24570 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=18 name=(null) inode=24562 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=19 name=(null) inode=24571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=20 name=(null) inode=24571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=21 name=(null) inode=24572 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=22 name=(null) inode=24571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=23 name=(null) inode=24573 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=24 name=(null) inode=24571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=25 name=(null) inode=24574 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=26 name=(null) inode=24571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=27 name=(null) inode=24575 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=28 name=(null) inode=24571 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=29 name=(null) inode=24576 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=30 name=(null) inode=24562 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=31 name=(null) inode=25601 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=32 name=(null) inode=25601 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=33 name=(null) inode=25602 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=34 name=(null) inode=25601 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=35 name=(null) inode=25603 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=36 name=(null) inode=25601 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=37 name=(null) inode=25604 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=38 name=(null) inode=25601 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=39 name=(null) inode=25605 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=40 name=(null) inode=25601 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=41 name=(null) inode=25606 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=42 name=(null) inode=24562 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=43 name=(null) inode=25607 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=44 name=(null) inode=25607 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=45 name=(null) inode=25608 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=46 name=(null) inode=25607 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=47 name=(null) inode=25609 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=48 name=(null) inode=25607 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=49 name=(null) inode=25610 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=50 name=(null) inode=25607 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=51 name=(null) inode=25611 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=52 name=(null) inode=25607 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=53 name=(null) inode=25612 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=54 name=(null) inode=45 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=55 name=(null) inode=25613 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=56 name=(null) inode=25613 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=57 name=(null) inode=25614 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=58 name=(null) inode=25613 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=59 name=(null) inode=25615 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=60 name=(null) inode=25613 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=61 name=(null) inode=25616 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=62 name=(null) inode=25616 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=63 name=(null) inode=25617 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=64 name=(null) inode=25616 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=65 name=(null) inode=25618 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=66 name=(null) inode=25616 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=67 name=(null) inode=25619 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=68 name=(null) inode=25616 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=69 name=(null) inode=25620 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=70 name=(null) inode=25616 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=71 name=(null) inode=25621 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=72 name=(null) inode=25613 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=73 name=(null) inode=25622 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=74 name=(null) inode=25622 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=75 name=(null) inode=25623 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=76 name=(null) inode=25622 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=77 name=(null) inode=25624 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=78 name=(null) inode=25622 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=79 name=(null) inode=25625 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=80 name=(null) inode=25622 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=81 name=(null) inode=25626 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=82 name=(null) inode=25622 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=83 name=(null) inode=25627 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=84 name=(null) inode=25613 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=85 name=(null) inode=25628 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=86 name=(null) inode=25628 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=87 name=(null) inode=25629 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=88 name=(null) inode=25628 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=89 name=(null) inode=25630 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=90 name=(null) inode=25628 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=91 name=(null) inode=25631 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=92 name=(null) inode=25628 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=93 name=(null) inode=25632 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=94 name=(null) inode=25628 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=95 name=(null) inode=25633 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=96 name=(null) inode=25613 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=97 name=(null) inode=25634 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=98 name=(null) inode=25634 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=99 name=(null) inode=25635 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=100 name=(null) inode=25634 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=101 name=(null) inode=25636 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=102 name=(null) inode=25634 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=103 name=(null) inode=25637 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=104 name=(null) inode=25634 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=105 name=(null) inode=25638 dev=00:0b mode=0100640 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=106 name=(null) inode=25634 dev=00:0b mode=040750 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=107 name=(null) inode=25639 dev=00:0b mode=0100440 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:tracefs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=108 name=(null) inode=1 dev=00:07 mode=040700 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PATH item=109 name=(null) inode=25640 dev=00:07 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:debugfs_t:s0 nametype=CREATE cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:26:51.063000 audit: PROCTITLE proctitle="(udev-worker)" Jul 15 11:26:51.084573 kernel: vmw_vmci 0000:00:07.7: Found VMCI PCI device at 0x11080, irq 16 Jul 15 11:26:51.087830 kernel: piix4_smbus 0000:00:07.3: SMBus Host Controller not enabled! Jul 15 11:26:51.087951 kernel: vmw_vmci 0000:00:07.7: Using capabilities 0xc Jul 15 11:26:51.088030 kernel: Guest personality initialized and is active Jul 15 11:26:51.089264 kernel: VMCI host device registered (name=vmci, major=10, minor=125) Jul 15 11:26:51.089313 kernel: Initialized host personality Jul 15 11:26:51.096596 kernel: input: ImPS/2 Generic Wheel Mouse as /devices/platform/i8042/serio1/input/input3 Jul 15 11:26:51.099052 (udev-worker)[1071]: id: Truncating stdout of 'dmi_memory_id' up to 16384 byte. Jul 15 11:26:51.101577 kernel: mousedev: PS/2 mouse device common for all mice Jul 15 11:26:51.112812 systemd[1]: Finished systemd-udev-settle.service. Jul 15 11:26:51.111000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-udev-settle comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:51.113816 systemd[1]: Starting lvm2-activation-early.service... Jul 15 11:26:51.135225 lvm[1088]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:26:51.161284 systemd[1]: Finished lvm2-activation-early.service. Jul 15 11:26:51.163581 kernel: kauditd_printk_skb: 228 callbacks suppressed Jul 15 11:26:51.163623 kernel: audit: type=1130 audit(1752578811.159:151): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:51.159000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation-early comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:51.161511 systemd[1]: Reached target cryptsetup.target. Jul 15 11:26:51.166049 systemd[1]: Starting lvm2-activation.service... Jul 15 11:26:51.168822 lvm[1089]: WARNING: Failed to connect to lvmetad. Falling back to device scanning. Jul 15 11:26:51.195198 systemd[1]: Finished lvm2-activation.service. Jul 15 11:26:51.193000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:51.195380 systemd[1]: Reached target local-fs-pre.target. Jul 15 11:26:51.197994 systemd[1]: var-lib-machines.mount was skipped because of an unmet condition check (ConditionPathExists=/var/lib/machines.raw). Jul 15 11:26:51.198014 systemd[1]: Reached target local-fs.target. Jul 15 11:26:51.198111 systemd[1]: Reached target machines.target. Jul 15 11:26:51.198593 kernel: audit: type=1130 audit(1752578811.193:152): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=lvm2-activation comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:51.199165 systemd[1]: Starting ldconfig.service... Jul 15 11:26:51.204190 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:26:51.204227 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:51.205155 systemd[1]: Starting systemd-boot-update.service... Jul 15 11:26:51.205941 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-OEM.service... Jul 15 11:26:51.206900 systemd[1]: Starting systemd-machine-id-commit.service... Jul 15 11:26:51.207877 systemd[1]: Starting systemd-sysext.service... Jul 15 11:26:51.228737 systemd[1]: boot.automount: Got automount request for /boot, triggered by 1091 (bootctl) Jul 15 11:26:51.229539 systemd[1]: Starting systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service... Jul 15 11:26:51.240210 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-OEM.service. Jul 15 11:26:51.244671 kernel: audit: type=1130 audit(1752578811.238:153): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:51.238000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-OEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:51.258618 systemd[1]: Unmounting usr-share-oem.mount... Jul 15 11:26:51.277438 systemd[1]: usr-share-oem.mount: Deactivated successfully. Jul 15 11:26:51.277631 systemd[1]: Unmounted usr-share-oem.mount. Jul 15 11:26:51.303586 kernel: loop0: detected capacity change from 0 to 229808 Jul 15 11:26:52.304101 systemd-fsck[1101]: fsck.fat 4.2 (2021-01-31) Jul 15 11:26:52.304101 systemd-fsck[1101]: /dev/sda1: 790 files, 120725/258078 clusters Jul 15 11:26:52.304000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.306033 systemd[1]: Finished systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM.service. Jul 15 11:26:52.307286 systemd[1]: Mounting boot.mount... Jul 15 11:26:52.310592 kernel: audit: type=1130 audit(1752578812.304:154): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-fsck@dev-disk-by\x2dlabel-EFI\x2dSYSTEM comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.445290 systemd[1]: etc-machine\x2did.mount: Deactivated successfully. Jul 15 11:26:52.445706 systemd[1]: Finished systemd-machine-id-commit.service. Jul 15 11:26:52.444000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.449581 kernel: audit: type=1130 audit(1752578812.444:155): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-machine-id-commit comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.455278 systemd[1]: Mounted boot.mount. Jul 15 11:26:52.472699 systemd[1]: Finished systemd-boot-update.service. Jul 15 11:26:52.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.476583 kernel: audit: type=1130 audit(1752578812.471:156): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-boot-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.476619 kernel: squashfs: version 4.0 (2009/01/31) Phillip Lougher Jul 15 11:26:52.498577 kernel: loop1: detected capacity change from 0 to 229808 Jul 15 11:26:52.569722 (sd-sysext)[1105]: Using extensions 'kubernetes'. Jul 15 11:26:52.570656 (sd-sysext)[1105]: Merged extensions into '/usr'. Jul 15 11:26:52.591145 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:52.592330 systemd[1]: Mounting usr-share-oem.mount... Jul 15 11:26:52.593346 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:26:52.595696 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:26:52.597406 systemd[1]: Starting modprobe@loop.service... Jul 15 11:26:52.597554 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:26:52.597669 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:52.597763 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:52.599740 systemd[1]: Mounted usr-share-oem.mount. Jul 15 11:26:52.600090 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:26:52.600185 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:26:52.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.600528 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:26:52.600621 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:26:52.598000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.605820 kernel: audit: type=1130 audit(1752578812.598:157): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.605860 kernel: audit: type=1131 audit(1752578812.598:158): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.604000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.606305 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:26:52.606503 systemd[1]: Finished modprobe@loop.service. Jul 15 11:26:52.604000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.611578 kernel: audit: type=1130 audit(1752578812.604:159): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.611620 kernel: audit: type=1131 audit(1752578812.604:160): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.610000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.610000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.612463 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:26:52.612976 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:26:52.613327 systemd[1]: Finished systemd-sysext.service. Jul 15 11:26:52.611000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.616515 systemd[1]: Starting ensure-sysext.service... Jul 15 11:26:52.617680 systemd[1]: Starting systemd-tmpfiles-setup.service... Jul 15 11:26:52.621726 systemd[1]: Reloading. Jul 15 11:26:52.663805 /usr/lib/systemd/system-generators/torcx-generator[1131]: time="2025-07-15T11:26:52Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:26:52.663824 /usr/lib/systemd/system-generators/torcx-generator[1131]: time="2025-07-15T11:26:52Z" level=info msg="torcx already run" Jul 15 11:26:52.681465 systemd-tmpfiles[1112]: /usr/lib/tmpfiles.d/legacy.conf:13: Duplicate line for path "/run/lock", ignoring. Jul 15 11:26:52.690130 systemd-tmpfiles[1112]: /usr/lib/tmpfiles.d/provision.conf:20: Duplicate line for path "/root", ignoring. Jul 15 11:26:52.696634 systemd-networkd[1057]: ens192: Gained IPv6LL Jul 15 11:26:52.698769 systemd-tmpfiles[1112]: /usr/lib/tmpfiles.d/systemd.conf:29: Duplicate line for path "/var/lib/systemd", ignoring. Jul 15 11:26:52.743839 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:26:52.743851 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:26:52.755686 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:26:52.789000 audit: BPF prog-id=27 op=LOAD Jul 15 11:26:52.789000 audit: BPF prog-id=23 op=UNLOAD Jul 15 11:26:52.790000 audit: BPF prog-id=28 op=LOAD Jul 15 11:26:52.790000 audit: BPF prog-id=29 op=LOAD Jul 15 11:26:52.790000 audit: BPF prog-id=21 op=UNLOAD Jul 15 11:26:52.790000 audit: BPF prog-id=22 op=UNLOAD Jul 15 11:26:52.791000 audit: BPF prog-id=30 op=LOAD Jul 15 11:26:52.791000 audit: BPF prog-id=18 op=UNLOAD Jul 15 11:26:52.791000 audit: BPF prog-id=31 op=LOAD Jul 15 11:26:52.791000 audit: BPF prog-id=32 op=LOAD Jul 15 11:26:52.791000 audit: BPF prog-id=19 op=UNLOAD Jul 15 11:26:52.791000 audit: BPF prog-id=20 op=UNLOAD Jul 15 11:26:52.792000 audit: BPF prog-id=33 op=LOAD Jul 15 11:26:52.792000 audit: BPF prog-id=24 op=UNLOAD Jul 15 11:26:52.792000 audit: BPF prog-id=34 op=LOAD Jul 15 11:26:52.792000 audit: BPF prog-id=35 op=LOAD Jul 15 11:26:52.792000 audit: BPF prog-id=25 op=UNLOAD Jul 15 11:26:52.792000 audit: BPF prog-id=26 op=UNLOAD Jul 15 11:26:52.805516 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:52.807962 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:26:52.810344 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:26:52.811926 systemd[1]: Starting modprobe@loop.service... Jul 15 11:26:52.812227 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:26:52.812638 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:52.812740 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:52.812000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.812000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.813000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.813000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.813968 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:26:52.814066 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:26:52.819000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.819000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.814396 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:26:52.814485 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:26:52.814800 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:26:52.814879 systemd[1]: Finished modprobe@loop.service. Jul 15 11:26:52.815187 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:26:52.815243 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:26:52.816789 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:52.817746 systemd[1]: Starting modprobe@dm_mod.service... Jul 15 11:26:52.818636 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:26:52.819455 systemd[1]: Starting modprobe@loop.service... Jul 15 11:26:52.819716 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:26:52.819800 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:52.819888 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:52.820378 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:26:52.820466 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:26:52.820814 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:26:52.823386 systemd[1]: modprobe@loop.service: Deactivated successfully. Jul 15 11:26:52.823478 systemd[1]: Finished modprobe@loop.service. Jul 15 11:26:52.822000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.822000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@loop comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.824212 systemd[1]: proc-xen.mount was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:52.825203 systemd[1]: Starting modprobe@drm.service... Jul 15 11:26:52.826359 systemd[1]: Starting modprobe@efi_pstore.service... Jul 15 11:26:52.826553 systemd[1]: systemd-binfmt.service was skipped because no trigger condition checks were met. Jul 15 11:26:52.826757 systemd[1]: systemd-boot-system-token.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/LoaderFeatures-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:26:52.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.828000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@dm_mod comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.828000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.828000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@drm comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.828778 systemd[1]: Starting systemd-networkd-wait-online.service... Jul 15 11:26:52.828927 systemd[1]: xenserver-pv-version.service was skipped because of an unmet condition check (ConditionVirtualization=xen). Jul 15 11:26:52.829445 systemd[1]: modprobe@dm_mod.service: Deactivated successfully. Jul 15 11:26:52.829524 systemd[1]: Finished modprobe@dm_mod.service. Jul 15 11:26:52.829873 systemd[1]: modprobe@drm.service: Deactivated successfully. Jul 15 11:26:52.829959 systemd[1]: Finished modprobe@drm.service. Jul 15 11:26:52.830319 systemd[1]: systemd-repart.service was skipped because no trigger condition checks were met. Jul 15 11:26:52.830000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=ensure-sysext comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.832271 systemd[1]: Finished ensure-sysext.service. Jul 15 11:26:52.831000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.831000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=modprobe@efi_pstore comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.833317 systemd[1]: modprobe@efi_pstore.service: Deactivated successfully. Jul 15 11:26:52.833408 systemd[1]: Finished modprobe@efi_pstore.service. Jul 15 11:26:52.833623 systemd[1]: systemd-pstore.service was skipped because of an unmet condition check (ConditionDirectoryNotEmpty=/sys/fs/pstore). Jul 15 11:26:52.834986 systemd[1]: Finished systemd-networkd-wait-online.service. Jul 15 11:26:52.833000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-networkd-wait-online comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.932389 systemd[1]: Finished systemd-tmpfiles-setup.service. Jul 15 11:26:52.930000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-tmpfiles-setup comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.933773 systemd[1]: Starting audit-rules.service... Jul 15 11:26:52.934857 systemd[1]: Starting clean-ca-certificates.service... Jul 15 11:26:52.935969 systemd[1]: Starting systemd-journal-catalog-update.service... Jul 15 11:26:52.935000 audit: BPF prog-id=36 op=LOAD Jul 15 11:26:52.937402 systemd[1]: Starting systemd-resolved.service... Jul 15 11:26:52.937000 audit: BPF prog-id=37 op=LOAD Jul 15 11:26:52.939973 systemd[1]: Starting systemd-timesyncd.service... Jul 15 11:26:52.941592 systemd[1]: Starting systemd-update-utmp.service... Jul 15 11:26:52.946000 audit[1206]: SYSTEM_BOOT pid=1206 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg=' comm="systemd-update-utmp" exe="/usr/lib/systemd/systemd-update-utmp" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.949000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-update-utmp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.950797 systemd[1]: Finished systemd-update-utmp.service. Jul 15 11:26:52.988444 systemd[1]: Finished clean-ca-certificates.service. Jul 15 11:26:52.986000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=clean-ca-certificates comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:52.988622 systemd[1]: update-ca-certificates.service was skipped because of an unmet condition check (ConditionPathIsSymbolicLink=!/etc/ssl/certs/ca-certificates.crt). Jul 15 11:26:53.000005 systemd[1]: Started systemd-timesyncd.service. Jul 15 11:26:53.000160 systemd[1]: Reached target time-set.target. Jul 15 11:26:52.998000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-timesyncd comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:53.019750 systemd-resolved[1204]: Positive Trust Anchors: Jul 15 11:26:53.019955 systemd-resolved[1204]: . IN DS 20326 8 2 e06d44b80b8f1d39a95c0b0d7c65d08458e880409bbc683457104237c7f8ec8d Jul 15 11:26:53.020039 systemd-resolved[1204]: Negative trust anchors: home.arpa 10.in-addr.arpa 16.172.in-addr.arpa 17.172.in-addr.arpa 18.172.in-addr.arpa 19.172.in-addr.arpa 20.172.in-addr.arpa 21.172.in-addr.arpa 22.172.in-addr.arpa 23.172.in-addr.arpa 24.172.in-addr.arpa 25.172.in-addr.arpa 26.172.in-addr.arpa 27.172.in-addr.arpa 28.172.in-addr.arpa 29.172.in-addr.arpa 30.172.in-addr.arpa 31.172.in-addr.arpa 168.192.in-addr.arpa d.f.ip6.arpa corp home internal intranet lan local private test Jul 15 11:26:53.035798 systemd[1]: Finished systemd-journal-catalog-update.service. Jul 15 11:26:53.034000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-journal-catalog-update comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:53.041600 systemd-resolved[1204]: Defaulting to hostname 'linux'. Jul 15 11:26:53.042936 systemd[1]: Started systemd-resolved.service. Jul 15 11:26:53.041000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=systemd-resolved comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:26:53.043077 systemd[1]: Reached target network.target. Jul 15 11:26:53.043162 systemd[1]: Reached target network-online.target. Jul 15 11:26:53.043249 systemd[1]: Reached target nss-lookup.target. Jul 15 11:26:53.043628 augenrules[1222]: No rules Jul 15 11:26:53.042000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=add_rule key=(null) list=5 res=1 Jul 15 11:26:53.042000 audit[1222]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff9264d0c0 a2=420 a3=0 items=0 ppid=1201 pid=1222 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:26:53.042000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D52002F6574632F61756469742F61756469742E72756C6573 Jul 15 11:26:53.044118 systemd[1]: Finished audit-rules.service. Jul 15 11:28:20.375113 systemd-timesyncd[1205]: Contacted time server 193.29.63.226:123 (0.flatcar.pool.ntp.org). Jul 15 11:28:20.375124 systemd-resolved[1204]: Clock change detected. Flushing caches. Jul 15 11:28:20.375424 systemd-timesyncd[1205]: Initial clock synchronization to Tue 2025-07-15 11:28:20.375029 UTC. Jul 15 11:28:20.395946 ldconfig[1090]: /sbin/ldconfig: /lib/ld.so.conf is not an ELF file - it has the wrong magic bytes at the start. Jul 15 11:28:20.398370 systemd[1]: Finished ldconfig.service. Jul 15 11:28:20.399433 systemd[1]: Starting systemd-update-done.service... Jul 15 11:28:20.404870 systemd[1]: Finished systemd-update-done.service. Jul 15 11:28:20.405034 systemd[1]: Reached target sysinit.target. Jul 15 11:28:20.405212 systemd[1]: Started motdgen.path. Jul 15 11:28:20.405332 systemd[1]: Started user-cloudinit@var-lib-flatcar\x2dinstall-user_data.path. Jul 15 11:28:20.405521 systemd[1]: Started logrotate.timer. Jul 15 11:28:20.405658 systemd[1]: Started mdadm.timer. Jul 15 11:28:20.405740 systemd[1]: Started systemd-tmpfiles-clean.timer. Jul 15 11:28:20.405837 systemd[1]: update-engine-stub.timer was skipped because of an unmet condition check (ConditionPathExists=/usr/.noupdate). Jul 15 11:28:20.405861 systemd[1]: Reached target paths.target. Jul 15 11:28:20.405947 systemd[1]: Reached target timers.target. Jul 15 11:28:20.406192 systemd[1]: Listening on dbus.socket. Jul 15 11:28:20.407083 systemd[1]: Starting docker.socket... Jul 15 11:28:20.408964 systemd[1]: Listening on sshd.socket. Jul 15 11:28:20.409130 systemd[1]: systemd-pcrphase-sysinit.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:28:20.409414 systemd[1]: Listening on docker.socket. Jul 15 11:28:20.409548 systemd[1]: Reached target sockets.target. Jul 15 11:28:20.409640 systemd[1]: Reached target basic.target. Jul 15 11:28:20.409760 systemd[1]: addon-config@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:28:20.409779 systemd[1]: addon-run@usr-share-oem.service was skipped because no trigger condition checks were met. Jul 15 11:28:20.410634 systemd[1]: Starting containerd.service... Jul 15 11:28:20.411499 systemd[1]: Starting dbus.service... Jul 15 11:28:20.412692 systemd[1]: Starting enable-oem-cloudinit.service... Jul 15 11:28:20.413940 systemd[1]: Starting extend-filesystems.service... Jul 15 11:28:20.414250 systemd[1]: flatcar-setup-environment.service was skipped because of an unmet condition check (ConditionPathExists=/usr/share/oem/bin/flatcar-setup-environment). Jul 15 11:28:20.415341 jq[1232]: false Jul 15 11:28:20.416401 systemd[1]: Starting kubelet.service... Jul 15 11:28:20.417305 systemd[1]: Starting motdgen.service... Jul 15 11:28:20.418757 systemd[1]: Starting prepare-helm.service... Jul 15 11:28:20.419570 systemd[1]: Starting ssh-key-proc-cmdline.service... Jul 15 11:28:20.420568 systemd[1]: Starting sshd-keygen.service... Jul 15 11:28:20.422107 systemd[1]: Starting systemd-logind.service... Jul 15 11:28:20.454283 jq[1244]: true Jul 15 11:28:20.422317 systemd[1]: systemd-pcrphase.service was skipped because of an unmet condition check (ConditionPathExists=/sys/firmware/efi/efivars/StubPcrKernelImage-4a67b082-0a4c-41cf-b6c7-440b29bb8c4f). Jul 15 11:28:20.422376 systemd[1]: tcsd.service was skipped because of an unmet condition check (ConditionPathExists=/dev/tpm0). Jul 15 11:28:20.422795 systemd[1]: cgroup compatibility translation between legacy and unified hierarchy settings activated. See cgroup-compat debug messages for details. Jul 15 11:28:20.460254 extend-filesystems[1233]: Found loop1 Jul 15 11:28:20.460254 extend-filesystems[1233]: Found sda Jul 15 11:28:20.460254 extend-filesystems[1233]: Found sda1 Jul 15 11:28:20.460254 extend-filesystems[1233]: Found sda2 Jul 15 11:28:20.460254 extend-filesystems[1233]: Found sda3 Jul 15 11:28:20.460254 extend-filesystems[1233]: Found usr Jul 15 11:28:20.460254 extend-filesystems[1233]: Found sda4 Jul 15 11:28:20.460254 extend-filesystems[1233]: Found sda6 Jul 15 11:28:20.460254 extend-filesystems[1233]: Found sda7 Jul 15 11:28:20.460254 extend-filesystems[1233]: Found sda9 Jul 15 11:28:20.460254 extend-filesystems[1233]: Checking size of /dev/sda9 Jul 15 11:28:20.423448 systemd[1]: Starting update-engine.service... Jul 15 11:28:20.469650 tar[1249]: linux-amd64/LICENSE Jul 15 11:28:20.469650 tar[1249]: linux-amd64/helm Jul 15 11:28:20.425177 systemd[1]: Starting update-ssh-keys-after-ignition.service... Jul 15 11:28:20.470472 jq[1250]: true Jul 15 11:28:20.426397 systemd[1]: Starting vmtoolsd.service... Jul 15 11:28:20.429408 systemd[1]: enable-oem-cloudinit.service: Skipped due to 'exec-condition'. Jul 15 11:28:20.429549 systemd[1]: Condition check resulted in enable-oem-cloudinit.service being skipped. Jul 15 11:28:20.430461 systemd[1]: ssh-key-proc-cmdline.service: Deactivated successfully. Jul 15 11:28:20.430568 systemd[1]: Finished ssh-key-proc-cmdline.service. Jul 15 11:28:20.445140 systemd[1]: Started vmtoolsd.service. Jul 15 11:28:20.475187 systemd[1]: motdgen.service: Deactivated successfully. Jul 15 11:28:20.475286 systemd[1]: Finished motdgen.service. Jul 15 11:28:20.495228 extend-filesystems[1233]: Old size kept for /dev/sda9 Jul 15 11:28:20.495228 extend-filesystems[1233]: Found sr0 Jul 15 11:28:20.494960 systemd[1]: extend-filesystems.service: Deactivated successfully. Jul 15 11:28:20.495058 systemd[1]: Finished extend-filesystems.service. Jul 15 11:28:20.499997 env[1251]: time="2025-07-15T11:28:20.499973674Z" level=info msg="starting containerd" revision=92b3a9d6f1b3bcc6dc74875cfdea653fe39f09c2 version=1.6.16 Jul 15 11:28:20.525497 bash[1283]: Updated "/home/core/.ssh/authorized_keys" Jul 15 11:28:20.525187 systemd[1]: Finished update-ssh-keys-after-ignition.service. Jul 15 11:28:20.533876 dbus-daemon[1231]: [system] SELinux support is enabled Jul 15 11:28:20.533983 systemd[1]: Started dbus.service. Jul 15 11:28:20.535584 systemd[1]: system-cloudinit@usr-share-oem-cloud\x2dconfig.yml.service was skipped because of an unmet condition check (ConditionFileNotEmpty=/usr/share/oem/cloud-config.yml). Jul 15 11:28:20.535601 systemd[1]: Reached target system-config.target. Jul 15 11:28:20.535729 systemd[1]: user-cloudinit-proc-cmdline.service was skipped because of an unmet condition check (ConditionKernelCommandLine=cloud-config-url). Jul 15 11:28:20.535741 systemd[1]: Reached target user-config.target. Jul 15 11:28:20.544301 env[1251]: time="2025-07-15T11:28:20.544275158Z" level=info msg="loading plugin \"io.containerd.content.v1.content\"..." type=io.containerd.content.v1 Jul 15 11:28:20.544688 env[1251]: time="2025-07-15T11:28:20.544676251Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.aufs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:28:20.545489 env[1251]: time="2025-07-15T11:28:20.545472025Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.aufs\"..." error="aufs is not supported (modprobe aufs failed: exit status 1 \"modprobe: FATAL: Module aufs not found in directory /lib/modules/5.15.188-flatcar\\n\"): skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:28:20.545547 env[1251]: time="2025-07-15T11:28:20.545533979Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:28:20.545717 env[1251]: time="2025-07-15T11:28:20.545704562Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.btrfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.btrfs (ext4) must be a btrfs filesystem to be used with the btrfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:28:20.545774 env[1251]: time="2025-07-15T11:28:20.545764621Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.devmapper\"..." type=io.containerd.snapshotter.v1 Jul 15 11:28:20.545823 env[1251]: time="2025-07-15T11:28:20.545812854Z" level=warning msg="failed to load plugin io.containerd.snapshotter.v1.devmapper" error="devmapper not configured" Jul 15 11:28:20.545866 env[1251]: time="2025-07-15T11:28:20.545856427Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.native\"..." type=io.containerd.snapshotter.v1 Jul 15 11:28:20.545945 env[1251]: time="2025-07-15T11:28:20.545936605Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.overlayfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:28:20.546218 env[1251]: time="2025-07-15T11:28:20.546207366Z" level=info msg="loading plugin \"io.containerd.snapshotter.v1.zfs\"..." type=io.containerd.snapshotter.v1 Jul 15 11:28:20.546396 env[1251]: time="2025-07-15T11:28:20.546367464Z" level=info msg="skip loading plugin \"io.containerd.snapshotter.v1.zfs\"..." error="path /var/lib/containerd/io.containerd.snapshotter.v1.zfs must be a zfs filesystem to be used with the zfs snapshotter: skip plugin" type=io.containerd.snapshotter.v1 Jul 15 11:28:20.547355 env[1251]: time="2025-07-15T11:28:20.547343520Z" level=info msg="loading plugin \"io.containerd.metadata.v1.bolt\"..." type=io.containerd.metadata.v1 Jul 15 11:28:20.547453 env[1251]: time="2025-07-15T11:28:20.547441869Z" level=warning msg="could not use snapshotter devmapper in metadata plugin" error="devmapper not configured" Jul 15 11:28:20.547514 env[1251]: time="2025-07-15T11:28:20.547502728Z" level=info msg="metadata content store policy set" policy=shared Jul 15 11:28:20.548634 systemd-logind[1241]: Watching system buttons on /dev/input/event1 (Power Button) Jul 15 11:28:20.548652 systemd-logind[1241]: Watching system buttons on /dev/input/event0 (AT Translated Set 2 keyboard) Jul 15 11:28:20.550596 systemd-logind[1241]: New seat seat0. Jul 15 11:28:20.554025 env[1251]: time="2025-07-15T11:28:20.554007519Z" level=info msg="loading plugin \"io.containerd.differ.v1.walking\"..." type=io.containerd.differ.v1 Jul 15 11:28:20.554107 env[1251]: time="2025-07-15T11:28:20.554095959Z" level=info msg="loading plugin \"io.containerd.event.v1.exchange\"..." type=io.containerd.event.v1 Jul 15 11:28:20.554190 env[1251]: time="2025-07-15T11:28:20.554180268Z" level=info msg="loading plugin \"io.containerd.gc.v1.scheduler\"..." type=io.containerd.gc.v1 Jul 15 11:28:20.554255 env[1251]: time="2025-07-15T11:28:20.554246174Z" level=info msg="loading plugin \"io.containerd.service.v1.introspection-service\"..." type=io.containerd.service.v1 Jul 15 11:28:20.554378 env[1251]: time="2025-07-15T11:28:20.554365715Z" level=info msg="loading plugin \"io.containerd.service.v1.containers-service\"..." type=io.containerd.service.v1 Jul 15 11:28:20.554434 env[1251]: time="2025-07-15T11:28:20.554421440Z" level=info msg="loading plugin \"io.containerd.service.v1.content-service\"..." type=io.containerd.service.v1 Jul 15 11:28:20.554490 env[1251]: time="2025-07-15T11:28:20.554480344Z" level=info msg="loading plugin \"io.containerd.service.v1.diff-service\"..." type=io.containerd.service.v1 Jul 15 11:28:20.554540 env[1251]: time="2025-07-15T11:28:20.554528944Z" level=info msg="loading plugin \"io.containerd.service.v1.images-service\"..." type=io.containerd.service.v1 Jul 15 11:28:20.554598 env[1251]: time="2025-07-15T11:28:20.554587607Z" level=info msg="loading plugin \"io.containerd.service.v1.leases-service\"..." type=io.containerd.service.v1 Jul 15 11:28:20.554651 env[1251]: time="2025-07-15T11:28:20.554640631Z" level=info msg="loading plugin \"io.containerd.service.v1.namespaces-service\"..." type=io.containerd.service.v1 Jul 15 11:28:20.554706 env[1251]: time="2025-07-15T11:28:20.554696123Z" level=info msg="loading plugin \"io.containerd.service.v1.snapshots-service\"..." type=io.containerd.service.v1 Jul 15 11:28:20.554758 env[1251]: time="2025-07-15T11:28:20.554748214Z" level=info msg="loading plugin \"io.containerd.runtime.v1.linux\"..." type=io.containerd.runtime.v1 Jul 15 11:28:20.554869 env[1251]: time="2025-07-15T11:28:20.554858767Z" level=info msg="loading plugin \"io.containerd.runtime.v2.task\"..." type=io.containerd.runtime.v2 Jul 15 11:28:20.554980 env[1251]: time="2025-07-15T11:28:20.554971384Z" level=info msg="loading plugin \"io.containerd.monitor.v1.cgroups\"..." type=io.containerd.monitor.v1 Jul 15 11:28:20.555233 env[1251]: time="2025-07-15T11:28:20.555215245Z" level=info msg="loading plugin \"io.containerd.service.v1.tasks-service\"..." type=io.containerd.service.v1 Jul 15 11:28:20.555360 env[1251]: time="2025-07-15T11:28:20.555350069Z" level=info msg="loading plugin \"io.containerd.grpc.v1.introspection\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.555410 env[1251]: time="2025-07-15T11:28:20.555400252Z" level=info msg="loading plugin \"io.containerd.internal.v1.restart\"..." type=io.containerd.internal.v1 Jul 15 11:28:20.555492 env[1251]: time="2025-07-15T11:28:20.555482288Z" level=info msg="loading plugin \"io.containerd.grpc.v1.containers\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.555586 env[1251]: time="2025-07-15T11:28:20.555577033Z" level=info msg="loading plugin \"io.containerd.grpc.v1.content\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.555636 env[1251]: time="2025-07-15T11:28:20.555626511Z" level=info msg="loading plugin \"io.containerd.grpc.v1.diff\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.555681 env[1251]: time="2025-07-15T11:28:20.555672171Z" level=info msg="loading plugin \"io.containerd.grpc.v1.events\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.555728 env[1251]: time="2025-07-15T11:28:20.555718316Z" level=info msg="loading plugin \"io.containerd.grpc.v1.healthcheck\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.555780 env[1251]: time="2025-07-15T11:28:20.555771076Z" level=info msg="loading plugin \"io.containerd.grpc.v1.images\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.555895 env[1251]: time="2025-07-15T11:28:20.555873462Z" level=info msg="loading plugin \"io.containerd.grpc.v1.leases\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.555995 systemd[1]: Started systemd-logind.service. Jul 15 11:28:20.556379 env[1251]: time="2025-07-15T11:28:20.556367495Z" level=info msg="loading plugin \"io.containerd.grpc.v1.namespaces\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.556440 env[1251]: time="2025-07-15T11:28:20.556430299Z" level=info msg="loading plugin \"io.containerd.internal.v1.opt\"..." type=io.containerd.internal.v1 Jul 15 11:28:20.556687 env[1251]: time="2025-07-15T11:28:20.556675653Z" level=info msg="loading plugin \"io.containerd.grpc.v1.snapshots\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.556741 env[1251]: time="2025-07-15T11:28:20.556729387Z" level=info msg="loading plugin \"io.containerd.grpc.v1.tasks\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.556794 env[1251]: time="2025-07-15T11:28:20.556784569Z" level=info msg="loading plugin \"io.containerd.grpc.v1.version\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.556845 env[1251]: time="2025-07-15T11:28:20.556835769Z" level=info msg="loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." type=io.containerd.tracing.processor.v1 Jul 15 11:28:20.556906 env[1251]: time="2025-07-15T11:28:20.556894995Z" level=info msg="skip loading plugin \"io.containerd.tracing.processor.v1.otlp\"..." error="no OpenTelemetry endpoint: skip plugin" type=io.containerd.tracing.processor.v1 Jul 15 11:28:20.556952 env[1251]: time="2025-07-15T11:28:20.556939878Z" level=info msg="loading plugin \"io.containerd.internal.v1.tracing\"..." type=io.containerd.internal.v1 Jul 15 11:28:20.557017 env[1251]: time="2025-07-15T11:28:20.557004410Z" level=error msg="failed to initialize a tracing processor \"otlp\"" error="no OpenTelemetry endpoint: skip plugin" Jul 15 11:28:20.557084 env[1251]: time="2025-07-15T11:28:20.557074773Z" level=info msg="loading plugin \"io.containerd.grpc.v1.cri\"..." type=io.containerd.grpc.v1 Jul 15 11:28:20.557380 env[1251]: time="2025-07-15T11:28:20.557298713Z" level=info msg="Start cri plugin with config {PluginConfig:{ContainerdConfig:{Snapshotter:overlayfs DefaultRuntimeName:runc DefaultRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} UntrustedWorkloadRuntime:{Type: Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0} Runtimes:map[runc:{Type:io.containerd.runc.v2 Path: Engine: PodAnnotations:[] ContainerAnnotations:[] Root: Options:map[SystemdCgroup:true] PrivilegedWithoutHostDevices:false BaseRuntimeSpec: NetworkPluginConfDir: NetworkPluginMaxConfNum:0}] NoPivot:false DisableSnapshotAnnotations:true DiscardUnpackedLayers:false IgnoreRdtNotEnabledErrors:false} CniConfig:{NetworkPluginBinDir:/opt/cni/bin NetworkPluginConfDir:/etc/cni/net.d NetworkPluginMaxConfNum:1 NetworkPluginConfTemplate: IPPreference:} Registry:{ConfigPath: Mirrors:map[] Configs:map[] Auths:map[] Headers:map[]} ImageDecryption:{KeyModel:node} DisableTCPService:true StreamServerAddress:127.0.0.1 StreamServerPort:0 StreamIdleTimeout:4h0m0s EnableSelinux:true SelinuxCategoryRange:1024 SandboxImage:registry.k8s.io/pause:3.6 StatsCollectPeriod:10 SystemdCgroup:false EnableTLSStreaming:false X509KeyPairStreaming:{TLSCertFile: TLSKeyFile:} MaxContainerLogLineSize:16384 DisableCgroup:false DisableApparmor:false RestrictOOMScoreAdj:false MaxConcurrentDownloads:3 DisableProcMount:false UnsetSeccompProfile: TolerateMissingHugetlbController:true DisableHugetlbController:true DeviceOwnershipFromSecurityContext:false IgnoreImageDefinedVolumes:false NetNSMountsUnderStateDir:false EnableUnprivilegedPorts:false EnableUnprivilegedICMP:false} ContainerdRootDir:/var/lib/containerd ContainerdEndpoint:/run/containerd/containerd.sock RootDir:/var/lib/containerd/io.containerd.grpc.v1.cri StateDir:/run/containerd/io.containerd.grpc.v1.cri}" Jul 15 11:28:20.560198 env[1251]: time="2025-07-15T11:28:20.557452453Z" level=info msg="Connect containerd service" Jul 15 11:28:20.560198 env[1251]: time="2025-07-15T11:28:20.557479611Z" level=info msg="Get image filesystem path \"/var/lib/containerd/io.containerd.snapshotter.v1.overlayfs\"" Jul 15 11:28:20.560198 env[1251]: time="2025-07-15T11:28:20.558121932Z" level=error msg="failed to load cni during init, please check CRI plugin status before setting up network for pods" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:28:20.560198 env[1251]: time="2025-07-15T11:28:20.558274741Z" level=info msg=serving... address=/run/containerd/containerd.sock.ttrpc Jul 15 11:28:20.560198 env[1251]: time="2025-07-15T11:28:20.558297692Z" level=info msg=serving... address=/run/containerd/containerd.sock Jul 15 11:28:20.560198 env[1251]: time="2025-07-15T11:28:20.558616783Z" level=info msg="containerd successfully booted in 0.061667s" Jul 15 11:28:20.560311 update_engine[1243]: I0715 11:28:20.559581 1243 main.cc:92] Flatcar Update Engine starting Jul 15 11:28:20.558384 systemd[1]: Started containerd.service. Jul 15 11:28:20.561620 env[1251]: time="2025-07-15T11:28:20.561595017Z" level=info msg="Start subscribing containerd event" Jul 15 11:28:20.565419 systemd[1]: Started update-engine.service. Jul 15 11:28:20.567731 update_engine[1243]: I0715 11:28:20.565456 1243 update_check_scheduler.cc:74] Next update check in 8m23s Jul 15 11:28:20.567077 systemd[1]: Started locksmithd.service. Jul 15 11:28:20.567858 env[1251]: time="2025-07-15T11:28:20.567839902Z" level=info msg="Start recovering state" Jul 15 11:28:20.568351 kernel: NET: Registered PF_VSOCK protocol family Jul 15 11:28:20.568466 env[1251]: time="2025-07-15T11:28:20.568454523Z" level=info msg="Start event monitor" Jul 15 11:28:20.568517 env[1251]: time="2025-07-15T11:28:20.568507133Z" level=info msg="Start snapshots syncer" Jul 15 11:28:20.568564 env[1251]: time="2025-07-15T11:28:20.568554257Z" level=info msg="Start cni network conf syncer for default" Jul 15 11:28:20.568614 env[1251]: time="2025-07-15T11:28:20.568602943Z" level=info msg="Start streaming server" Jul 15 11:28:20.896109 tar[1249]: linux-amd64/README.md Jul 15 11:28:20.899135 systemd[1]: Finished prepare-helm.service. Jul 15 11:28:21.170131 locksmithd[1296]: locksmithd starting currentOperation="UPDATE_STATUS_IDLE" strategy="reboot" Jul 15 11:28:22.666434 systemd[1]: Started kubelet.service. Jul 15 11:28:23.159008 sshd_keygen[1264]: ssh-keygen: generating new host keys: RSA ECDSA ED25519 Jul 15 11:28:23.176976 systemd[1]: Finished sshd-keygen.service. Jul 15 11:28:23.178181 systemd[1]: Starting issuegen.service... Jul 15 11:28:23.181641 systemd[1]: issuegen.service: Deactivated successfully. Jul 15 11:28:23.181730 systemd[1]: Finished issuegen.service. Jul 15 11:28:23.182787 systemd[1]: Starting systemd-user-sessions.service... Jul 15 11:28:23.191135 systemd[1]: Finished systemd-user-sessions.service. Jul 15 11:28:23.192086 systemd[1]: Started getty@tty1.service. Jul 15 11:28:23.192927 systemd[1]: Started serial-getty@ttyS0.service. Jul 15 11:28:23.193135 systemd[1]: Reached target getty.target. Jul 15 11:28:23.193274 systemd[1]: Reached target multi-user.target. Jul 15 11:28:23.194189 systemd[1]: Starting systemd-update-utmp-runlevel.service... Jul 15 11:28:23.198534 systemd[1]: systemd-update-utmp-runlevel.service: Deactivated successfully. Jul 15 11:28:23.198623 systemd[1]: Finished systemd-update-utmp-runlevel.service. Jul 15 11:28:23.198787 systemd[1]: Startup finished in 953ms (kernel) + 6.863s (initrd) + 9.498s (userspace) = 17.316s. Jul 15 11:28:23.280297 login[1367]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 15 11:28:23.280703 login[1368]: pam_unix(login:session): session opened for user core(uid=500) by LOGIN(uid=0) Jul 15 11:28:23.291773 systemd[1]: Created slice user-500.slice. Jul 15 11:28:23.293339 systemd[1]: Starting user-runtime-dir@500.service... Jul 15 11:28:23.297962 systemd-logind[1241]: New session 1 of user core. Jul 15 11:28:23.300801 systemd-logind[1241]: New session 2 of user core. Jul 15 11:28:23.304037 systemd[1]: Finished user-runtime-dir@500.service. Jul 15 11:28:23.305150 systemd[1]: Starting user@500.service... Jul 15 11:28:23.308217 (systemd)[1371]: pam_unix(systemd-user:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:23.362716 systemd[1371]: Queued start job for default target default.target. Jul 15 11:28:23.363048 systemd[1371]: Reached target paths.target. Jul 15 11:28:23.363062 systemd[1371]: Reached target sockets.target. Jul 15 11:28:23.363071 systemd[1371]: Reached target timers.target. Jul 15 11:28:23.363078 systemd[1371]: Reached target basic.target. Jul 15 11:28:23.363109 systemd[1371]: Reached target default.target. Jul 15 11:28:23.363124 systemd[1371]: Startup finished in 50ms. Jul 15 11:28:23.363557 systemd[1]: Started user@500.service. Jul 15 11:28:23.364383 systemd[1]: Started session-1.scope. Jul 15 11:28:23.364886 systemd[1]: Started session-2.scope. Jul 15 11:28:23.572289 kubelet[1350]: E0715 11:28:23.572225 1350 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:28:23.573596 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:28:23.573670 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:28:33.752683 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 1. Jul 15 11:28:33.752840 systemd[1]: Stopped kubelet.service. Jul 15 11:28:33.754053 systemd[1]: Starting kubelet.service... Jul 15 11:28:33.985345 systemd[1]: Started kubelet.service. Jul 15 11:28:34.077614 kubelet[1395]: E0715 11:28:34.077558 1395 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:28:34.079764 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:28:34.079837 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:28:44.252654 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 2. Jul 15 11:28:44.252826 systemd[1]: Stopped kubelet.service. Jul 15 11:28:44.254149 systemd[1]: Starting kubelet.service... Jul 15 11:28:44.542233 systemd[1]: Started kubelet.service. Jul 15 11:28:44.591156 kubelet[1404]: E0715 11:28:44.591132 1404 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:28:44.592572 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:28:44.592645 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:28:50.917228 systemd[1]: Created slice system-sshd.slice. Jul 15 11:28:50.918837 systemd[1]: Started sshd@0-139.178.70.108:22-147.75.109.163:42600.service. Jul 15 11:28:50.974891 sshd[1410]: Accepted publickey for core from 147.75.109.163 port 42600 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:28:50.976163 sshd[1410]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:50.980007 systemd[1]: Started session-3.scope. Jul 15 11:28:50.980407 systemd-logind[1241]: New session 3 of user core. Jul 15 11:28:51.029322 systemd[1]: Started sshd@1-139.178.70.108:22-147.75.109.163:42612.service. Jul 15 11:28:51.061616 sshd[1415]: Accepted publickey for core from 147.75.109.163 port 42612 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:28:51.062559 sshd[1415]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:51.065518 systemd[1]: Started session-4.scope. Jul 15 11:28:51.065610 systemd-logind[1241]: New session 4 of user core. Jul 15 11:28:51.115289 sshd[1415]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:51.117071 systemd[1]: sshd@1-139.178.70.108:22-147.75.109.163:42612.service: Deactivated successfully. Jul 15 11:28:51.117434 systemd[1]: session-4.scope: Deactivated successfully. Jul 15 11:28:51.117991 systemd-logind[1241]: Session 4 logged out. Waiting for processes to exit. Jul 15 11:28:51.118735 systemd[1]: Started sshd@2-139.178.70.108:22-147.75.109.163:42628.service. Jul 15 11:28:51.119243 systemd-logind[1241]: Removed session 4. Jul 15 11:28:51.147690 sshd[1421]: Accepted publickey for core from 147.75.109.163 port 42628 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:28:51.148637 sshd[1421]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:51.151024 systemd-logind[1241]: New session 5 of user core. Jul 15 11:28:51.151485 systemd[1]: Started session-5.scope. Jul 15 11:28:51.199195 sshd[1421]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:51.201888 systemd[1]: sshd@2-139.178.70.108:22-147.75.109.163:42628.service: Deactivated successfully. Jul 15 11:28:51.202364 systemd[1]: session-5.scope: Deactivated successfully. Jul 15 11:28:51.202833 systemd-logind[1241]: Session 5 logged out. Waiting for processes to exit. Jul 15 11:28:51.203628 systemd[1]: Started sshd@3-139.178.70.108:22-147.75.109.163:42642.service. Jul 15 11:28:51.205421 systemd-logind[1241]: Removed session 5. Jul 15 11:28:51.235483 sshd[1427]: Accepted publickey for core from 147.75.109.163 port 42642 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:28:51.236406 sshd[1427]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:51.239650 systemd-logind[1241]: New session 6 of user core. Jul 15 11:28:51.240187 systemd[1]: Started session-6.scope. Jul 15 11:28:51.293996 sshd[1427]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:51.296304 systemd[1]: Started sshd@4-139.178.70.108:22-147.75.109.163:42654.service. Jul 15 11:28:51.296992 systemd[1]: sshd@3-139.178.70.108:22-147.75.109.163:42642.service: Deactivated successfully. Jul 15 11:28:51.297540 systemd[1]: session-6.scope: Deactivated successfully. Jul 15 11:28:51.298424 systemd-logind[1241]: Session 6 logged out. Waiting for processes to exit. Jul 15 11:28:51.300645 systemd-logind[1241]: Removed session 6. Jul 15 11:28:51.329845 sshd[1432]: Accepted publickey for core from 147.75.109.163 port 42654 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:28:51.330601 sshd[1432]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:51.333092 systemd-logind[1241]: New session 7 of user core. Jul 15 11:28:51.333559 systemd[1]: Started session-7.scope. Jul 15 11:28:51.477162 sudo[1436]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/sbin/setenforce 1 Jul 15 11:28:51.477366 sudo[1436]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:28:51.485401 dbus-daemon[1231]: \xd0\u000d'\x85EV: received setenforce notice (enforcing=-403060464) Jul 15 11:28:51.485850 sudo[1436]: pam_unix(sudo:session): session closed for user root Jul 15 11:28:51.487837 sshd[1432]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:51.490906 systemd[1]: Started sshd@5-139.178.70.108:22-147.75.109.163:42670.service. Jul 15 11:28:51.491407 systemd[1]: sshd@4-139.178.70.108:22-147.75.109.163:42654.service: Deactivated successfully. Jul 15 11:28:51.491918 systemd[1]: session-7.scope: Deactivated successfully. Jul 15 11:28:51.493411 systemd-logind[1241]: Session 7 logged out. Waiting for processes to exit. Jul 15 11:28:51.494064 systemd-logind[1241]: Removed session 7. Jul 15 11:28:51.521879 sshd[1439]: Accepted publickey for core from 147.75.109.163 port 42670 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:28:51.522686 sshd[1439]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:51.525778 systemd[1]: Started session-8.scope. Jul 15 11:28:51.526362 systemd-logind[1241]: New session 8 of user core. Jul 15 11:28:51.575578 sudo[1444]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/rm -rf /etc/audit/rules.d/80-selinux.rules /etc/audit/rules.d/99-default.rules Jul 15 11:28:51.575714 sudo[1444]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:28:51.577398 sudo[1444]: pam_unix(sudo:session): session closed for user root Jul 15 11:28:51.580320 sudo[1443]: core : PWD=/home/core ; USER=root ; COMMAND=/usr/bin/systemctl restart audit-rules Jul 15 11:28:51.580610 sudo[1443]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:28:51.586605 systemd[1]: Stopping audit-rules.service... Jul 15 11:28:51.590820 kernel: kauditd_printk_skb: 51 callbacks suppressed Jul 15 11:28:51.590905 kernel: audit: type=1305 audit(1752578931.587:210): auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:28:51.587000 audit: CONFIG_CHANGE auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 op=remove_rule key=(null) list=5 res=1 Jul 15 11:28:51.590960 auditctl[1447]: No rules Jul 15 11:28:51.587917 systemd[1]: audit-rules.service: Deactivated successfully. Jul 15 11:28:51.588004 systemd[1]: Stopped audit-rules.service. Jul 15 11:28:51.588974 systemd[1]: Starting audit-rules.service... Jul 15 11:28:51.587000 audit[1447]: SYSCALL arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff0c5794a0 a2=420 a3=0 items=0 ppid=1 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:51.594675 kernel: audit: type=1300 audit(1752578931.587:210): arch=c000003e syscall=44 success=yes exit=1056 a0=3 a1=7fff0c5794a0 a2=420 a3=0 items=0 ppid=1 pid=1447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="auditctl" exe="/usr/sbin/auditctl" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:51.587000 audit: PROCTITLE proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:28:51.595935 kernel: audit: type=1327 audit(1752578931.587:210): proctitle=2F7362696E2F617564697463746C002D44 Jul 15 11:28:51.595962 kernel: audit: type=1131 audit(1752578931.587:211): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.587000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.605315 augenrules[1464]: No rules Jul 15 11:28:51.605741 systemd[1]: Finished audit-rules.service. Jul 15 11:28:51.605000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.606168 sudo[1443]: pam_unix(sudo:session): session closed for user root Jul 15 11:28:51.605000 audit[1443]: USER_END pid=1443 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.611979 kernel: audit: type=1130 audit(1752578931.605:212): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=audit-rules comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.612004 kernel: audit: type=1106 audit(1752578931.605:213): pid=1443 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.612819 kernel: audit: type=1104 audit(1752578931.605:214): pid=1443 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.605000 audit[1443]: CRED_DISP pid=1443 uid=500 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.612521 sshd[1439]: pam_unix(sshd:session): session closed for user core Jul 15 11:28:51.614432 systemd[1]: Started sshd@6-139.178.70.108:22-147.75.109.163:42676.service. Jul 15 11:28:51.612000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.108:22-147.75.109.163:42676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.619480 kernel: audit: type=1130 audit(1752578931.612:215): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.108:22-147.75.109.163:42676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.619510 kernel: audit: type=1106 audit(1752578931.618:216): pid=1439 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:28:51.618000 audit[1439]: USER_END pid=1439 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:28:51.618987 systemd[1]: sshd@5-139.178.70.108:22-147.75.109.163:42670.service: Deactivated successfully. Jul 15 11:28:51.619313 systemd[1]: session-8.scope: Deactivated successfully. Jul 15 11:28:51.618000 audit[1439]: CRED_DISP pid=1439 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:28:51.622100 systemd-logind[1241]: Session 8 logged out. Waiting for processes to exit. Jul 15 11:28:51.622639 systemd-logind[1241]: Removed session 8. Jul 15 11:28:51.624774 kernel: audit: type=1104 audit(1752578931.618:217): pid=1439 uid=0 auid=500 ses=8 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:28:51.618000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@5-139.178.70.108:22-147.75.109.163:42670 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.647000 audit[1469]: USER_ACCT pid=1469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:28:51.647580 sshd[1469]: Accepted publickey for core from 147.75.109.163 port 42676 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:28:51.648000 audit[1469]: CRED_ACQ pid=1469 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:28:51.648000 audit[1469]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd54e99010 a2=3 a3=0 items=0 ppid=1 pid=1469 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=9 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:51.648000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:28:51.648817 sshd[1469]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:28:51.652114 systemd[1]: Started session-9.scope. Jul 15 11:28:51.653010 systemd-logind[1241]: New session 9 of user core. Jul 15 11:28:51.655000 audit[1469]: USER_START pid=1469 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:28:51.656000 audit[1472]: CRED_ACQ pid=1472 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:28:51.703286 sudo[1473]: core : PWD=/home/core ; USER=root ; COMMAND=/home/core/install.sh Jul 15 11:28:51.703494 sudo[1473]: pam_unix(sudo:session): session opened for user root(uid=0) by (uid=500) Jul 15 11:28:51.702000 audit[1473]: USER_ACCT pid=1473 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.703000 audit[1473]: CRED_REFR pid=1473 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.704000 audit[1473]: USER_START pid=1473 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:28:51.731125 systemd[1]: Starting docker.service... Jul 15 11:28:51.759778 env[1484]: time="2025-07-15T11:28:51.759747495Z" level=info msg="Starting up" Jul 15 11:28:51.760661 env[1484]: time="2025-07-15T11:28:51.760601539Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:28:51.760726 env[1484]: time="2025-07-15T11:28:51.760712792Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:28:51.760790 env[1484]: time="2025-07-15T11:28:51.760779033Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:28:51.760841 env[1484]: time="2025-07-15T11:28:51.760829363Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:28:51.762318 env[1484]: time="2025-07-15T11:28:51.762305380Z" level=info msg="parsed scheme: \"unix\"" module=grpc Jul 15 11:28:51.762450 env[1484]: time="2025-07-15T11:28:51.762438674Z" level=info msg="scheme \"unix\" not registered, fallback to default scheme" module=grpc Jul 15 11:28:51.762516 env[1484]: time="2025-07-15T11:28:51.762501566Z" level=info msg="ccResolverWrapper: sending update to cc: {[{unix:///var/run/docker/libcontainerd/docker-containerd.sock 0 }] }" module=grpc Jul 15 11:28:51.762559 env[1484]: time="2025-07-15T11:28:51.762550302Z" level=info msg="ClientConn switching balancer to \"pick_first\"" module=grpc Jul 15 11:28:51.766235 systemd[1]: var-lib-docker-check\x2doverlayfs\x2dsupport3722359669-merged.mount: Deactivated successfully. Jul 15 11:28:52.004563 env[1484]: time="2025-07-15T11:28:52.004545492Z" level=info msg="Loading containers: start." Jul 15 11:28:52.166000 audit[1515]: NETFILTER_CFG table=nat:2 family=2 entries=2 op=nft_register_chain pid=1515 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.166000 audit[1515]: SYSCALL arch=c000003e syscall=46 success=yes exit=116 a0=3 a1=7fff77fd8530 a2=0 a3=7fff77fd851c items=0 ppid=1484 pid=1515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.166000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4E00444F434B4552 Jul 15 11:28:52.168000 audit[1517]: NETFILTER_CFG table=filter:3 family=2 entries=2 op=nft_register_chain pid=1517 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.168000 audit[1517]: SYSCALL arch=c000003e syscall=46 success=yes exit=124 a0=3 a1=7fff74321830 a2=0 a3=7fff7432181c items=0 ppid=1484 pid=1517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.168000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B4552 Jul 15 11:28:52.169000 audit[1519]: NETFILTER_CFG table=filter:4 family=2 entries=1 op=nft_register_chain pid=1519 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.169000 audit[1519]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7fff6fe67a70 a2=0 a3=7fff6fe67a5c items=0 ppid=1484 pid=1519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.169000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:28:52.170000 audit[1521]: NETFILTER_CFG table=filter:5 family=2 entries=1 op=nft_register_chain pid=1521 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.170000 audit[1521]: SYSCALL arch=c000003e syscall=46 success=yes exit=112 a0=3 a1=7ffc9f1ba1d0 a2=0 a3=7ffc9f1ba1bc items=0 ppid=1484 pid=1521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.170000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:28:52.177000 audit[1523]: NETFILTER_CFG table=filter:6 family=2 entries=1 op=nft_register_rule pid=1523 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.177000 audit[1523]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff26efa740 a2=0 a3=7fff26efa72c items=0 ppid=1484 pid=1523 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.177000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D31002D6A0052455455524E Jul 15 11:28:52.206000 audit[1528]: NETFILTER_CFG table=filter:7 family=2 entries=1 op=nft_register_rule pid=1528 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.206000 audit[1528]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff5cb8e830 a2=0 a3=7fff5cb8e81c items=0 ppid=1484 pid=1528 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.206000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D49534F4C4154494F4E2D53544147452D32002D6A0052455455524E Jul 15 11:28:52.255000 audit[1530]: NETFILTER_CFG table=filter:8 family=2 entries=1 op=nft_register_chain pid=1530 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.255000 audit[1530]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffcf48ac090 a2=0 a3=7ffcf48ac07c items=0 ppid=1484 pid=1530 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.255000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4E00444F434B45522D55534552 Jul 15 11:28:52.257000 audit[1532]: NETFILTER_CFG table=filter:9 family=2 entries=1 op=nft_register_rule pid=1532 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.257000 audit[1532]: SYSCALL arch=c000003e syscall=46 success=yes exit=212 a0=3 a1=7ffe17ac3b00 a2=0 a3=7ffe17ac3aec items=0 ppid=1484 pid=1532 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.257000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4100444F434B45522D55534552002D6A0052455455524E Jul 15 11:28:52.258000 audit[1534]: NETFILTER_CFG table=filter:10 family=2 entries=2 op=nft_register_chain pid=1534 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.258000 audit[1534]: SYSCALL arch=c000003e syscall=46 success=yes exit=308 a0=3 a1=7ffdf1936350 a2=0 a3=7ffdf193633c items=0 ppid=1484 pid=1534 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.258000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:28:52.292000 audit[1538]: NETFILTER_CFG table=filter:11 family=2 entries=1 op=nft_unregister_rule pid=1538 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.292000 audit[1538]: SYSCALL arch=c000003e syscall=46 success=yes exit=216 a0=3 a1=7ffd702a6850 a2=0 a3=7ffd702a683c items=0 ppid=1484 pid=1538 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.292000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:28:52.296000 audit[1539]: NETFILTER_CFG table=filter:12 family=2 entries=1 op=nft_register_rule pid=1539 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.296000 audit[1539]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffe2513f2f0 a2=0 a3=7ffe2513f2dc items=0 ppid=1484 pid=1539 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.296000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:28:52.313339 kernel: Initializing XFRM netlink socket Jul 15 11:28:52.352952 env[1484]: time="2025-07-15T11:28:52.352930102Z" level=info msg="Default bridge (docker0) is assigned with an IP address 172.17.0.0/16. Daemon option --bip can be used to set a preferred IP address" Jul 15 11:28:52.369000 audit[1547]: NETFILTER_CFG table=nat:13 family=2 entries=2 op=nft_register_chain pid=1547 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.369000 audit[1547]: SYSCALL arch=c000003e syscall=46 success=yes exit=492 a0=3 a1=7ffeb9dda5c0 a2=0 a3=7ffeb9dda5ac items=0 ppid=1484 pid=1547 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.369000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900504F5354524F5554494E47002D73003137322E31372E302E302F31360000002D6F00646F636B657230002D6A004D415351554552414445 Jul 15 11:28:52.377000 audit[1550]: NETFILTER_CFG table=nat:14 family=2 entries=1 op=nft_register_rule pid=1550 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.377000 audit[1550]: SYSCALL arch=c000003e syscall=46 success=yes exit=288 a0=3 a1=7ffdd4886520 a2=0 a3=7ffdd488650c items=0 ppid=1484 pid=1550 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.377000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4900444F434B4552002D6900646F636B657230002D6A0052455455524E Jul 15 11:28:52.380000 audit[1553]: NETFILTER_CFG table=filter:15 family=2 entries=1 op=nft_register_rule pid=1553 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.380000 audit[1553]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffa84ac990 a2=0 a3=7fffa84ac97c items=0 ppid=1484 pid=1553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.380000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B657230002D6F00646F636B657230002D6A00414343455054 Jul 15 11:28:52.381000 audit[1555]: NETFILTER_CFG table=filter:16 family=2 entries=1 op=nft_register_rule pid=1555 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.381000 audit[1555]: SYSCALL arch=c000003e syscall=46 success=yes exit=376 a0=3 a1=7fffbdbc0080 a2=0 a3=7fffbdbc006c items=0 ppid=1484 pid=1555 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.381000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6900646F636B6572300000002D6F00646F636B657230002D6A00414343455054 Jul 15 11:28:52.382000 audit[1557]: NETFILTER_CFG table=nat:17 family=2 entries=2 op=nft_register_chain pid=1557 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.382000 audit[1557]: SYSCALL arch=c000003e syscall=46 success=yes exit=356 a0=3 a1=7ffffb1f8440 a2=0 a3=7ffffb1f842c items=0 ppid=1484 pid=1557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.382000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D4100505245524F5554494E47002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B4552 Jul 15 11:28:52.384000 audit[1559]: NETFILTER_CFG table=nat:18 family=2 entries=2 op=nft_register_chain pid=1559 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.384000 audit[1559]: SYSCALL arch=c000003e syscall=46 success=yes exit=444 a0=3 a1=7ffe41d8bb00 a2=0 a3=7ffe41d8baec items=0 ppid=1484 pid=1559 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.384000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D74006E6174002D41004F5554505554002D6D006164647274797065002D2D6473742D74797065004C4F43414C002D6A00444F434B45520000002D2D647374003132372E302E302E302F38 Jul 15 11:28:52.385000 audit[1561]: NETFILTER_CFG table=filter:19 family=2 entries=1 op=nft_register_rule pid=1561 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.385000 audit[1561]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd539ea260 a2=0 a3=7ffd539ea24c items=0 ppid=1484 pid=1561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.385000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6A00444F434B4552 Jul 15 11:28:52.391000 audit[1564]: NETFILTER_CFG table=filter:20 family=2 entries=1 op=nft_register_rule pid=1564 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.391000 audit[1564]: SYSCALL arch=c000003e syscall=46 success=yes exit=508 a0=3 a1=7ffe6dac5510 a2=0 a3=7ffe6dac54fc items=0 ppid=1484 pid=1564 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.391000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6F00646F636B657230002D6D00636F6E6E747261636B002D2D637473746174650052454C415445442C45535441424C4953484544002D6A00414343455054 Jul 15 11:28:52.393000 audit[1566]: NETFILTER_CFG table=filter:21 family=2 entries=1 op=nft_register_rule pid=1566 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.393000 audit[1566]: SYSCALL arch=c000003e syscall=46 success=yes exit=240 a0=3 a1=7fffe5020bd0 a2=0 a3=7fffe5020bbc items=0 ppid=1484 pid=1566 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.393000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D31 Jul 15 11:28:52.394000 audit[1568]: NETFILTER_CFG table=filter:22 family=2 entries=1 op=nft_register_rule pid=1568 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.394000 audit[1568]: SYSCALL arch=c000003e syscall=46 success=yes exit=428 a0=3 a1=7ffdf85a3720 a2=0 a3=7ffdf85a370c items=0 ppid=1484 pid=1568 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.394000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D31002D6900646F636B6572300000002D6F00646F636B657230002D6A00444F434B45522D49534F4C4154494F4E2D53544147452D32 Jul 15 11:28:52.396000 audit[1570]: NETFILTER_CFG table=filter:23 family=2 entries=1 op=nft_register_rule pid=1570 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.396000 audit[1570]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7ffc9933d260 a2=0 a3=7ffc9933d24c items=0 ppid=1484 pid=1570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.396000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D740066696C746572002D4900444F434B45522D49534F4C4154494F4E2D53544147452D32002D6F00646F636B657230002D6A0044524F50 Jul 15 11:28:52.396739 systemd-networkd[1057]: docker0: Link UP Jul 15 11:28:52.410000 audit[1574]: NETFILTER_CFG table=filter:24 family=2 entries=1 op=nft_unregister_rule pid=1574 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.410000 audit[1574]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fffb14c1260 a2=0 a3=7fffb14c124c items=0 ppid=1484 pid=1574 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.410000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4400464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:28:52.414000 audit[1575]: NETFILTER_CFG table=filter:25 family=2 entries=1 op=nft_register_rule pid=1575 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:28:52.414000 audit[1575]: SYSCALL arch=c000003e syscall=46 success=yes exit=224 a0=3 a1=7ffd005b1850 a2=0 a3=7ffd005b183c items=0 ppid=1484 pid=1575 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:28:52.414000 audit: PROCTITLE proctitle=2F7573722F7362696E2F69707461626C6573002D2D77616974002D4900464F5257415244002D6A00444F434B45522D55534552 Jul 15 11:28:52.415247 env[1484]: time="2025-07-15T11:28:52.415225640Z" level=info msg="Loading containers: done." Jul 15 11:28:52.421746 systemd[1]: var-lib-docker-overlay2-opaque\x2dbug\x2dcheck1336409505-merged.mount: Deactivated successfully. Jul 15 11:28:52.452237 env[1484]: time="2025-07-15T11:28:52.452200747Z" level=warning msg="Not using native diff for overlay2, this may cause degraded performance for building images: kernel has CONFIG_OVERLAY_FS_REDIRECT_DIR enabled" storage-driver=overlay2 Jul 15 11:28:52.452393 env[1484]: time="2025-07-15T11:28:52.452378072Z" level=info msg="Docker daemon" commit=112bdf3343 graphdriver(s)=overlay2 version=20.10.23 Jul 15 11:28:52.452455 env[1484]: time="2025-07-15T11:28:52.452442629Z" level=info msg="Daemon has completed initialization" Jul 15 11:28:52.471000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=docker comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:52.471464 systemd[1]: Started docker.service. Jul 15 11:28:52.475830 env[1484]: time="2025-07-15T11:28:52.475797673Z" level=info msg="API listen on /run/docker.sock" Jul 15 11:28:53.349814 env[1251]: time="2025-07-15T11:28:53.349647752Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\"" Jul 15 11:28:53.912089 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2107930111.mount: Deactivated successfully. Jul 15 11:28:54.752000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:54.752000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:54.752504 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 3. Jul 15 11:28:54.752626 systemd[1]: Stopped kubelet.service. Jul 15 11:28:54.753681 systemd[1]: Starting kubelet.service... Jul 15 11:28:54.814000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:28:54.814569 systemd[1]: Started kubelet.service. Jul 15 11:28:54.893319 kubelet[1612]: E0715 11:28:54.893295 1612 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:28:54.894000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:28:54.894470 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:28:54.894545 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:28:55.214251 env[1251]: time="2025-07-15T11:28:55.213737982Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:55.215219 env[1251]: time="2025-07-15T11:28:55.215198102Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:55.217006 env[1251]: time="2025-07-15T11:28:55.216978747Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-apiserver:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:55.218748 env[1251]: time="2025-07-15T11:28:55.218722333Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-apiserver@sha256:e8ae58675899e946fabe38425f2b3bfd33120b7930d05b5898de97c81a7f6137,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:55.219594 env[1251]: time="2025-07-15T11:28:55.219568190Z" level=info msg="PullImage \"registry.k8s.io/kube-apiserver:v1.33.2\" returns image reference \"sha256:ee794efa53d856b7e291320be3cd6390fa2e113c3f258a21290bc27fc214233e\"" Jul 15 11:28:55.219984 env[1251]: time="2025-07-15T11:28:55.219968072Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\"" Jul 15 11:28:56.720567 env[1251]: time="2025-07-15T11:28:56.720516307Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:56.734658 env[1251]: time="2025-07-15T11:28:56.734635296Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:56.737061 env[1251]: time="2025-07-15T11:28:56.737044493Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-controller-manager:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:56.737980 env[1251]: time="2025-07-15T11:28:56.737962692Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-controller-manager@sha256:2236e72a4be5dcc9c04600353ff8849db1557f5364947c520ff05471ae719081,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:56.738517 env[1251]: time="2025-07-15T11:28:56.738502390Z" level=info msg="PullImage \"registry.k8s.io/kube-controller-manager:v1.33.2\" returns image reference \"sha256:ff4f56c76b82d6cda0555115a0fe479d5dd612264b85efb9cc14b1b4b937bdf2\"" Jul 15 11:28:56.738833 env[1251]: time="2025-07-15T11:28:56.738821127Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\"" Jul 15 11:28:58.079458 env[1251]: time="2025-07-15T11:28:58.079424940Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:58.101244 env[1251]: time="2025-07-15T11:28:58.101213791Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:58.111838 env[1251]: time="2025-07-15T11:28:58.111818153Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-scheduler:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:58.123791 env[1251]: time="2025-07-15T11:28:58.123767008Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-scheduler@sha256:304c28303133be7d927973bc9bd6c83945b3735c59d283c25b63d5b9ed53bca3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:58.124468 env[1251]: time="2025-07-15T11:28:58.124447743Z" level=info msg="PullImage \"registry.k8s.io/kube-scheduler:v1.33.2\" returns image reference \"sha256:cfed1ff7489289d4e8d796b0d95fd251990403510563cf843912f42ab9718a7b\"" Jul 15 11:28:58.124838 env[1251]: time="2025-07-15T11:28:58.124821739Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\"" Jul 15 11:28:59.362247 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1955843122.mount: Deactivated successfully. Jul 15 11:28:59.917841 env[1251]: time="2025-07-15T11:28:59.917804012Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:59.930398 env[1251]: time="2025-07-15T11:28:59.930378718Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:59.940862 env[1251]: time="2025-07-15T11:28:59.940843154Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/kube-proxy:v1.33.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:59.945525 env[1251]: time="2025-07-15T11:28:59.945511132Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/kube-proxy@sha256:4796ef3e43efa5ed2a5b015c18f81d3c2fe3aea36f555ea643cc01827eb65e51,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:28:59.945709 env[1251]: time="2025-07-15T11:28:59.945688891Z" level=info msg="PullImage \"registry.k8s.io/kube-proxy:v1.33.2\" returns image reference \"sha256:661d404f36f01cd854403fd3540f18dcf0342d22bd9c6516bb9de234ac183b19\"" Jul 15 11:28:59.946192 env[1251]: time="2025-07-15T11:28:59.946174187Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\"" Jul 15 11:29:00.470220 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1951877492.mount: Deactivated successfully. Jul 15 11:29:01.323141 env[1251]: time="2025-07-15T11:29:01.323101243Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:01.324215 env[1251]: time="2025-07-15T11:29:01.324197650Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:01.325447 env[1251]: time="2025-07-15T11:29:01.325431112Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/coredns/coredns:v1.12.0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:01.326604 env[1251]: time="2025-07-15T11:29:01.326586733Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/coredns/coredns@sha256:40384aa1f5ea6bfdc77997d243aec73da05f27aed0c5e9d65bfa98933c519d97,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:01.327060 env[1251]: time="2025-07-15T11:29:01.327037378Z" level=info msg="PullImage \"registry.k8s.io/coredns/coredns:v1.12.0\" returns image reference \"sha256:1cf5f116067c67da67f97bff78c4bbc76913f59057c18627b96facaced73ea0b\"" Jul 15 11:29:01.327807 env[1251]: time="2025-07-15T11:29:01.327760184Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\"" Jul 15 11:29:02.005512 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount469485837.mount: Deactivated successfully. Jul 15 11:29:02.007593 env[1251]: time="2025-07-15T11:29:02.007564975Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:02.010399 env[1251]: time="2025-07-15T11:29:02.010379504Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:02.011051 env[1251]: time="2025-07-15T11:29:02.011035548Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.10,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:02.011817 env[1251]: time="2025-07-15T11:29:02.011803255Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:ee6521f290b2168b6e0935a181d4cff9be1ac3f505666ef0e3c98fae8199917a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:02.012143 env[1251]: time="2025-07-15T11:29:02.012125255Z" level=info msg="PullImage \"registry.k8s.io/pause:3.10\" returns image reference \"sha256:873ed75102791e5b0b8a7fcd41606c92fcec98d56d05ead4ac5131650004c136\"" Jul 15 11:29:02.012474 env[1251]: time="2025-07-15T11:29:02.012462090Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\"" Jul 15 11:29:02.657388 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2460549472.mount: Deactivated successfully. Jul 15 11:29:04.820009 env[1251]: time="2025-07-15T11:29:04.819946431Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:04.832388 env[1251]: time="2025-07-15T11:29:04.832363398Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:04.840835 env[1251]: time="2025-07-15T11:29:04.840808079Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/etcd:3.5.21-0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:04.852799 env[1251]: time="2025-07-15T11:29:04.852773666Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/etcd@sha256:d58c035df557080a27387d687092e3fc2b64c6d0e3162dc51453a115f847d121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:04.853480 env[1251]: time="2025-07-15T11:29:04.853455253Z" level=info msg="PullImage \"registry.k8s.io/etcd:3.5.21-0\" returns image reference \"sha256:499038711c0816eda03a1ad96a8eb0440c005baa6949698223c6176b7f5077e1\"" Jul 15 11:29:05.004392 kernel: kauditd_printk_skb: 88 callbacks suppressed Jul 15 11:29:05.004469 kernel: audit: type=1130 audit(1752578945.002:256): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:05.002000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:05.002651 systemd[1]: kubelet.service: Scheduled restart job, restart counter is at 4. Jul 15 11:29:05.002841 systemd[1]: Stopped kubelet.service. Jul 15 11:29:05.004853 systemd[1]: Starting kubelet.service... Jul 15 11:29:05.002000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:05.010973 kernel: audit: type=1131 audit(1752578945.002:257): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:05.893882 update_engine[1243]: I0715 11:29:05.893515 1243 update_attempter.cc:509] Updating boot flags... Jul 15 11:29:06.646927 systemd[1]: Started kubelet.service. Jul 15 11:29:06.646000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:06.650341 kernel: audit: type=1130 audit(1752578946.646:258): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:06.687608 kubelet[1660]: E0715 11:29:06.687581 1660 run.go:72] "command failed" err="failed to load kubelet config file, path: /var/lib/kubelet/config.yaml, error: failed to load Kubelet config file /var/lib/kubelet/config.yaml, error failed to read kubelet config file \"/var/lib/kubelet/config.yaml\", error: open /var/lib/kubelet/config.yaml: no such file or directory" Jul 15 11:29:06.688714 systemd[1]: kubelet.service: Main process exited, code=exited, status=1/FAILURE Jul 15 11:29:06.688794 systemd[1]: kubelet.service: Failed with result 'exit-code'. Jul 15 11:29:06.688000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:29:06.692346 kernel: audit: type=1131 audit(1752578946.688:259): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:29:07.314188 systemd[1]: Stopped kubelet.service. Jul 15 11:29:07.313000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:07.315818 systemd[1]: Starting kubelet.service... Jul 15 11:29:07.317340 kernel: audit: type=1130 audit(1752578947.313:260): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:07.313000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:07.321362 kernel: audit: type=1131 audit(1752578947.313:261): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:07.343738 systemd[1]: Reloading. Jul 15 11:29:07.399986 /usr/lib/systemd/system-generators/torcx-generator[1692]: time="2025-07-15T11:29:07Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:29:07.400003 /usr/lib/systemd/system-generators/torcx-generator[1692]: time="2025-07-15T11:29:07Z" level=info msg="torcx already run" Jul 15 11:29:07.461997 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:29:07.462012 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:29:07.473878 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:29:07.526954 kernel: audit: type=1400 audit(1752578947.519:262): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.527037 kernel: audit: type=1400 audit(1752578947.519:263): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.527054 kernel: audit: type=1400 audit(1752578947.519:264): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.519000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.519000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.526000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.526000 audit: BPF prog-id=43 op=LOAD Jul 15 11:29:07.526000 audit: BPF prog-id=27 op=UNLOAD Jul 15 11:29:07.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.527000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.527000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit: BPF prog-id=44 op=LOAD Jul 15 11:29:07.530000 audit: BPF prog-id=36 op=UNLOAD Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit: BPF prog-id=45 op=LOAD Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531349 kernel: audit: type=1400 audit(1752578947.519:265): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.530000 audit: BPF prog-id=46 op=LOAD Jul 15 11:29:07.530000 audit: BPF prog-id=28 op=UNLOAD Jul 15 11:29:07.530000 audit: BPF prog-id=29 op=UNLOAD Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit: BPF prog-id=47 op=LOAD Jul 15 11:29:07.531000 audit: BPF prog-id=37 op=UNLOAD Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.531000 audit: BPF prog-id=48 op=LOAD Jul 15 11:29:07.531000 audit: BPF prog-id=41 op=UNLOAD Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit: BPF prog-id=49 op=LOAD Jul 15 11:29:07.532000 audit: BPF prog-id=38 op=UNLOAD Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit: BPF prog-id=50 op=LOAD Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.532000 audit: BPF prog-id=51 op=LOAD Jul 15 11:29:07.532000 audit: BPF prog-id=39 op=UNLOAD Jul 15 11:29:07.532000 audit: BPF prog-id=40 op=UNLOAD Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit: BPF prog-id=52 op=LOAD Jul 15 11:29:07.533000 audit: BPF prog-id=30 op=UNLOAD Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit: BPF prog-id=53 op=LOAD Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.533000 audit: BPF prog-id=54 op=LOAD Jul 15 11:29:07.533000 audit: BPF prog-id=31 op=UNLOAD Jul 15 11:29:07.533000 audit: BPF prog-id=32 op=UNLOAD Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit: BPF prog-id=55 op=LOAD Jul 15 11:29:07.534000 audit: BPF prog-id=33 op=UNLOAD Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit: BPF prog-id=56 op=LOAD Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:07.534000 audit: BPF prog-id=57 op=LOAD Jul 15 11:29:07.534000 audit: BPF prog-id=34 op=UNLOAD Jul 15 11:29:07.534000 audit: BPF prog-id=35 op=UNLOAD Jul 15 11:29:07.703000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=failed' Jul 15 11:29:07.703481 systemd[1]: kubelet.service: Control process exited, code=killed, status=15/TERM Jul 15 11:29:07.703541 systemd[1]: kubelet.service: Failed with result 'signal'. Jul 15 11:29:07.703700 systemd[1]: Stopped kubelet.service. Jul 15 11:29:07.704935 systemd[1]: Starting kubelet.service... Jul 15 11:29:08.408000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:08.408698 systemd[1]: Started kubelet.service. Jul 15 11:29:08.432213 kubelet[1756]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:29:08.432213 kubelet[1756]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:29:08.432213 kubelet[1756]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:29:08.432470 kubelet[1756]: I0715 11:29:08.432230 1756 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:29:08.898046 kubelet[1756]: I0715 11:29:08.898025 1756 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 15 11:29:08.898170 kubelet[1756]: I0715 11:29:08.898163 1756 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:29:08.898388 kubelet[1756]: I0715 11:29:08.898380 1756 server.go:956] "Client rotation is on, will bootstrap in background" Jul 15 11:29:08.931690 kubelet[1756]: I0715 11:29:08.931660 1756 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:29:08.931847 kubelet[1756]: E0715 11:29:08.931832 1756 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://139.178.70.108:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 15 11:29:08.936997 kubelet[1756]: E0715 11:29:08.936973 1756 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:29:08.937077 kubelet[1756]: I0715 11:29:08.936997 1756 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:29:08.939572 kubelet[1756]: I0715 11:29:08.939560 1756 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:29:08.939699 kubelet[1756]: I0715 11:29:08.939684 1756 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:29:08.939827 kubelet[1756]: I0715 11:29:08.939700 1756 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:29:08.939899 kubelet[1756]: I0715 11:29:08.939829 1756 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:29:08.939899 kubelet[1756]: I0715 11:29:08.939836 1756 container_manager_linux.go:303] "Creating device plugin manager" Jul 15 11:29:08.940625 kubelet[1756]: I0715 11:29:08.940613 1756 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:29:08.942626 kubelet[1756]: I0715 11:29:08.942614 1756 kubelet.go:480] "Attempting to sync node with API server" Jul 15 11:29:08.942653 kubelet[1756]: I0715 11:29:08.942629 1756 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:29:08.948779 kubelet[1756]: I0715 11:29:08.948766 1756 kubelet.go:386] "Adding apiserver pod source" Jul 15 11:29:08.954421 kubelet[1756]: I0715 11:29:08.954407 1756 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:29:08.966191 kubelet[1756]: E0715 11:29:08.966168 1756 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://139.178.70.108:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 15 11:29:08.971637 kubelet[1756]: E0715 11:29:08.971614 1756 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://139.178.70.108:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 15 11:29:08.971935 kubelet[1756]: I0715 11:29:08.971885 1756 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:29:08.972458 kubelet[1756]: I0715 11:29:08.972444 1756 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 15 11:29:08.973050 kubelet[1756]: W0715 11:29:08.973037 1756 probe.go:272] Flexvolume plugin directory at /opt/libexec/kubernetes/kubelet-plugins/volume/exec/ does not exist. Recreating. Jul 15 11:29:08.977102 kubelet[1756]: I0715 11:29:08.977084 1756 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:29:08.977161 kubelet[1756]: I0715 11:29:08.977122 1756 server.go:1289] "Started kubelet" Jul 15 11:29:08.983000 audit[1756]: AVC avc: denied { mac_admin } for pid=1756 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:08.983000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:29:08.983000 audit[1756]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c00080e330 a1=c000a3ede0 a2=c00080e300 a3=25 items=0 ppid=1 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:08.983000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:29:08.983954 kubelet[1756]: I0715 11:29:08.983935 1756 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:29:08.983000 audit[1756]: AVC avc: denied { mac_admin } for pid=1756 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:08.983000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:29:08.983000 audit[1756]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000a6c360 a1=c000a3edf8 a2=c00080e3c0 a3=25 items=0 ppid=1 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:08.983000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:29:08.984130 kubelet[1756]: I0715 11:29:08.984119 1756 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:29:08.984404 kubelet[1756]: I0715 11:29:08.984395 1756 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:29:08.984464 kubelet[1756]: I0715 11:29:08.984428 1756 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:29:08.985089 kubelet[1756]: I0715 11:29:08.985075 1756 server.go:317] "Adding debug handlers to kubelet server" Jul 15 11:29:08.988016 kubelet[1756]: I0715 11:29:08.987004 1756 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:29:08.988016 kubelet[1756]: I0715 11:29:08.987148 1756 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:29:08.988464 kubelet[1756]: E0715 11:29:08.987447 1756 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.108:6443/api/v1/namespaces/default/events\": dial tcp 139.178.70.108:6443: connect: connection refused" event="&Event{ObjectMeta:{localhost.18526944be9b8cf1 default 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Node,Namespace:,Name:localhost,UID:localhost,APIVersion:,ResourceVersion:,FieldPath:,},Reason:Starting,Message:Starting kubelet.,Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:29:08.977102065 +0000 UTC m=+0.564922371,LastTimestamp:2025-07-15 11:29:08.977102065 +0000 UTC m=+0.564922371,Count:1,Type:Normal,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:29:08.988000 audit[1772]: NETFILTER_CFG table=mangle:26 family=2 entries=2 op=nft_register_chain pid=1772 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:08.988000 audit[1772]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffc17e00840 a2=0 a3=7ffc17e0082c items=0 ppid=1756 pid=1772 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:08.988000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:29:08.989211 kubelet[1756]: E0715 11:29:08.989198 1756 kubelet.go:1600] "Image garbage collection failed once. Stats initialization may not have completed yet" err="invalid capacity 0 on image filesystem" Jul 15 11:29:08.989359 kubelet[1756]: I0715 11:29:08.989348 1756 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:29:08.989000 audit[1773]: NETFILTER_CFG table=filter:27 family=2 entries=1 op=nft_register_chain pid=1773 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:08.989000 audit[1773]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffdfe8db390 a2=0 a3=7ffdfe8db37c items=0 ppid=1756 pid=1773 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:08.989000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:29:08.990491 kubelet[1756]: I0715 11:29:08.990483 1756 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:29:08.990657 kubelet[1756]: E0715 11:29:08.990646 1756 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:29:08.990000 audit[1775]: NETFILTER_CFG table=filter:28 family=2 entries=2 op=nft_register_chain pid=1775 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:08.990000 audit[1775]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffa0f4fe30 a2=0 a3=7fffa0f4fe1c items=0 ppid=1756 pid=1775 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:08.990000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:29:08.991823 kubelet[1756]: I0715 11:29:08.991810 1756 factory.go:223] Registration of the systemd container factory successfully Jul 15 11:29:08.991887 kubelet[1756]: I0715 11:29:08.991874 1756 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:29:08.994039 kubelet[1756]: I0715 11:29:08.994030 1756 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:29:08.994112 kubelet[1756]: I0715 11:29:08.994105 1756 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:29:08.994613 kubelet[1756]: E0715 11:29:08.994595 1756 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.108:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.108:6443: connect: connection refused" interval="200ms" Jul 15 11:29:08.994000 audit[1777]: NETFILTER_CFG table=filter:29 family=2 entries=2 op=nft_register_chain pid=1777 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:08.994000 audit[1777]: SYSCALL arch=c000003e syscall=46 success=yes exit=312 a0=3 a1=7fffa6deddf0 a2=0 a3=7fffa6dedddc items=0 ppid=1756 pid=1777 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:08.994000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:29:08.995254 kubelet[1756]: I0715 11:29:08.995242 1756 factory.go:223] Registration of the containerd container factory successfully Jul 15 11:29:08.999000 audit[1780]: NETFILTER_CFG table=filter:30 family=2 entries=1 op=nft_register_rule pid=1780 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:08.999000 audit[1780]: SYSCALL arch=c000003e syscall=46 success=yes exit=924 a0=3 a1=7fff64e0aef0 a2=0 a3=7fff64e0aedc items=0 ppid=1756 pid=1780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:08.999000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D41004B5542452D4649524557414C4C002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E7400626C6F636B20696E636F6D696E67206C6F63616C6E657420636F6E6E656374696F6E73002D2D647374003132372E302E302E302F38 Jul 15 11:29:09.000098 kubelet[1756]: I0715 11:29:09.000079 1756 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 15 11:29:09.000000 audit[1781]: NETFILTER_CFG table=mangle:31 family=10 entries=2 op=nft_register_chain pid=1781 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:09.000000 audit[1781]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7ffe41cb2e60 a2=0 a3=7ffe41cb2e4c items=0 ppid=1756 pid=1781 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:09.000000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D49505441424C45532D48494E54002D74006D616E676C65 Jul 15 11:29:09.000819 kubelet[1756]: I0715 11:29:09.000811 1756 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 15 11:29:09.000864 kubelet[1756]: I0715 11:29:09.000857 1756 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 15 11:29:09.000914 kubelet[1756]: I0715 11:29:09.000906 1756 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:29:09.000955 kubelet[1756]: I0715 11:29:09.000948 1756 kubelet.go:2436] "Starting kubelet main sync loop" Jul 15 11:29:09.001022 kubelet[1756]: E0715 11:29:09.001006 1756 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:29:09.001000 audit[1782]: NETFILTER_CFG table=mangle:32 family=2 entries=1 op=nft_register_chain pid=1782 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:09.001000 audit[1782]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffca9db17a0 a2=0 a3=7ffca9db178c items=0 ppid=1756 pid=1782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:09.001000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:29:09.001000 audit[1783]: NETFILTER_CFG table=nat:33 family=2 entries=1 op=nft_register_chain pid=1783 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:09.001000 audit[1783]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe8b7258e0 a2=0 a3=7ffe8b7258cc items=0 ppid=1756 pid=1783 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:09.001000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:29:09.002000 audit[1784]: NETFILTER_CFG table=filter:34 family=2 entries=1 op=nft_register_chain pid=1784 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:09.002000 audit[1784]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff9a9c2410 a2=0 a3=7fff9a9c23fc items=0 ppid=1756 pid=1784 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:09.002000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:29:09.003000 audit[1785]: NETFILTER_CFG table=mangle:35 family=10 entries=1 op=nft_register_chain pid=1785 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:09.003000 audit[1785]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe73511e30 a2=0 a3=7ffe73511e1c items=0 ppid=1756 pid=1785 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:09.003000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006D616E676C65 Jul 15 11:29:09.003000 audit[1786]: NETFILTER_CFG table=nat:36 family=10 entries=2 op=nft_register_chain pid=1786 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:09.003000 audit[1786]: SYSCALL arch=c000003e syscall=46 success=yes exit=128 a0=3 a1=7ffdac51e700 a2=0 a3=7ffdac51e6ec items=0 ppid=1756 pid=1786 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:09.003000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D74006E6174 Jul 15 11:29:09.004000 audit[1787]: NETFILTER_CFG table=filter:37 family=10 entries=2 op=nft_register_chain pid=1787 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:09.004000 audit[1787]: SYSCALL arch=c000003e syscall=46 success=yes exit=136 a0=3 a1=7fff70249cf0 a2=0 a3=7fff70249cdc items=0 ppid=1756 pid=1787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:09.004000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4B5542454C45542D43414E415259002D740066696C746572 Jul 15 11:29:09.006295 kubelet[1756]: E0715 11:29:09.006282 1756 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://139.178.70.108:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 15 11:29:09.006425 kubelet[1756]: E0715 11:29:09.006415 1756 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://139.178.70.108:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 15 11:29:09.018653 kubelet[1756]: I0715 11:29:09.018634 1756 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:29:09.018653 kubelet[1756]: I0715 11:29:09.018645 1756 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:29:09.018653 kubelet[1756]: I0715 11:29:09.018656 1756 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:29:09.019637 kubelet[1756]: I0715 11:29:09.019625 1756 policy_none.go:49] "None policy: Start" Jul 15 11:29:09.019637 kubelet[1756]: I0715 11:29:09.019638 1756 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:29:09.019700 kubelet[1756]: I0715 11:29:09.019645 1756 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:29:09.022275 systemd[1]: Created slice kubepods.slice. Jul 15 11:29:09.025183 systemd[1]: Created slice kubepods-burstable.slice. Jul 15 11:29:09.027311 systemd[1]: Created slice kubepods-besteffort.slice. Jul 15 11:29:09.031834 kubelet[1756]: E0715 11:29:09.031820 1756 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 15 11:29:09.031000 audit[1756]: AVC avc: denied { mac_admin } for pid=1756 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:09.031000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:29:09.031000 audit[1756]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000e43410 a1=c000e60df8 a2=c000e433e0 a3=25 items=0 ppid=1 pid=1756 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:09.031000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:29:09.032002 kubelet[1756]: E0715 11:29:09.031877 1756 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 15 11:29:09.032002 kubelet[1756]: I0715 11:29:09.031953 1756 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:29:09.032002 kubelet[1756]: I0715 11:29:09.031960 1756 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:29:09.032980 kubelet[1756]: I0715 11:29:09.032814 1756 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:29:09.033187 kubelet[1756]: E0715 11:29:09.033161 1756 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:29:09.033187 kubelet[1756]: E0715 11:29:09.033183 1756 eviction_manager.go:292] "Eviction manager: failed to get summary stats" err="failed to get node info: node \"localhost\" not found" Jul 15 11:29:09.106352 systemd[1]: Created slice kubepods-burstable-pod84b858ec27c8b2738b1d9ff9927e0dcb.slice. Jul 15 11:29:09.111869 kubelet[1756]: E0715 11:29:09.111741 1756 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:29:09.113756 systemd[1]: Created slice kubepods-burstable-podb47365809593e24dce17091a932a2e5f.slice. Jul 15 11:29:09.116245 systemd[1]: Created slice kubepods-burstable-pod834ee54f1daa06092e339273649eb5ea.slice. Jul 15 11:29:09.117937 kubelet[1756]: E0715 11:29:09.117926 1756 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:29:09.119061 kubelet[1756]: E0715 11:29:09.119051 1756 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:29:09.132911 kubelet[1756]: I0715 11:29:09.132890 1756 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:29:09.133091 kubelet[1756]: E0715 11:29:09.133075 1756 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.108:6443/api/v1/nodes\": dial tcp 139.178.70.108:6443: connect: connection refused" node="localhost" Jul 15 11:29:09.197356 kubelet[1756]: E0715 11:29:09.195818 1756 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.108:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.108:6443: connect: connection refused" interval="400ms" Jul 15 11:29:09.197356 kubelet[1756]: I0715 11:29:09.195889 1756 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b47365809593e24dce17091a932a2e5f-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"b47365809593e24dce17091a932a2e5f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:29:09.197356 kubelet[1756]: I0715 11:29:09.195904 1756 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:09.197356 kubelet[1756]: I0715 11:29:09.195916 1756 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:09.197356 kubelet[1756]: I0715 11:29:09.195926 1756 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:29:09.197519 kubelet[1756]: I0715 11:29:09.195934 1756 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b47365809593e24dce17091a932a2e5f-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"b47365809593e24dce17091a932a2e5f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:29:09.197519 kubelet[1756]: I0715 11:29:09.195942 1756 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:09.197519 kubelet[1756]: I0715 11:29:09.195951 1756 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:09.197519 kubelet[1756]: I0715 11:29:09.195960 1756 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:09.197519 kubelet[1756]: I0715 11:29:09.195969 1756 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b47365809593e24dce17091a932a2e5f-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"b47365809593e24dce17091a932a2e5f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:29:09.334824 kubelet[1756]: I0715 11:29:09.334808 1756 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:29:09.335136 kubelet[1756]: E0715 11:29:09.335123 1756 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.108:6443/api/v1/nodes\": dial tcp 139.178.70.108:6443: connect: connection refused" node="localhost" Jul 15 11:29:09.413454 env[1251]: time="2025-07-15T11:29:09.413426061Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,}" Jul 15 11:29:09.419123 env[1251]: time="2025-07-15T11:29:09.419101374Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:b47365809593e24dce17091a932a2e5f,Namespace:kube-system,Attempt:0,}" Jul 15 11:29:09.419573 env[1251]: time="2025-07-15T11:29:09.419520721Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,}" Jul 15 11:29:09.596751 kubelet[1756]: E0715 11:29:09.596716 1756 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.108:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.108:6443: connect: connection refused" interval="800ms" Jul 15 11:29:09.736364 kubelet[1756]: I0715 11:29:09.736345 1756 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:29:09.736667 kubelet[1756]: E0715 11:29:09.736654 1756 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.108:6443/api/v1/nodes\": dial tcp 139.178.70.108:6443: connect: connection refused" node="localhost" Jul 15 11:29:09.851709 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1643113568.mount: Deactivated successfully. Jul 15 11:29:09.853045 env[1251]: time="2025-07-15T11:29:09.852996642Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.854211 env[1251]: time="2025-07-15T11:29:09.854195512Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.855529 env[1251]: time="2025-07-15T11:29:09.855513574Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.856033 env[1251]: time="2025-07-15T11:29:09.856017687Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.857813 env[1251]: time="2025-07-15T11:29:09.857783705Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.859333 env[1251]: time="2025-07-15T11:29:09.859312662Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:6270bb605e12e581514ada5fd5b3216f727db55dc87d5889c790e4c760683fee,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.859730 env[1251]: time="2025-07-15T11:29:09.859719285Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.860390 env[1251]: time="2025-07-15T11:29:09.860377410Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.860820 env[1251]: time="2025-07-15T11:29:09.860808571Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause:3.6,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.872115 kubelet[1756]: E0715 11:29:09.872083 1756 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: Get \"https://139.178.70.108:6443/apis/node.k8s.io/v1/runtimeclasses?limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 15 11:29:09.952759 env[1251]: time="2025-07-15T11:29:09.952651584Z" level=info msg="ImageCreate event &ImageCreate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.954520 env[1251]: time="2025-07-15T11:29:09.954500224Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.955484 env[1251]: time="2025-07-15T11:29:09.955461119Z" level=info msg="ImageUpdate event &ImageUpdate{Name:registry.k8s.io/pause@sha256:3d380ca8864549e74af4b29c10f9cb0956236dfb01c40ca076fb6c37253234db,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:09.971136 env[1251]: time="2025-07-15T11:29:09.971101560Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:29:09.971612 env[1251]: time="2025-07-15T11:29:09.971123579Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:29:09.971612 env[1251]: time="2025-07-15T11:29:09.971274029Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:29:09.971612 env[1251]: time="2025-07-15T11:29:09.971411908Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/486569508d95cb6a98b616df557f2b505cb608f7851f58cb36ad59bbb823e1fc pid=1797 runtime=io.containerd.runc.v2 Jul 15 11:29:09.986444 env[1251]: time="2025-07-15T11:29:09.986400802Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:29:09.986541 env[1251]: time="2025-07-15T11:29:09.986446555Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:29:09.986541 env[1251]: time="2025-07-15T11:29:09.986462204Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:29:09.986954 env[1251]: time="2025-07-15T11:29:09.986927048Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f2a21d2823cdaf72d57fe53dccc81b451f7c64b7bbaaa89e2c503b3a7e4ce09d pid=1820 runtime=io.containerd.runc.v2 Jul 15 11:29:09.990360 env[1251]: time="2025-07-15T11:29:09.989787644Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:29:09.990360 env[1251]: time="2025-07-15T11:29:09.989808639Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:29:09.990360 env[1251]: time="2025-07-15T11:29:09.989815471Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:29:09.990360 env[1251]: time="2025-07-15T11:29:09.989875167Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e82c4083b9d102dc0f40bee08b6c53ac3393683f34bc2ac899f4e597ad807f9d pid=1840 runtime=io.containerd.runc.v2 Jul 15 11:29:09.990345 systemd[1]: Started cri-containerd-486569508d95cb6a98b616df557f2b505cb608f7851f58cb36ad59bbb823e1fc.scope. Jul 15 11:29:10.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.008391 kernel: kauditd_printk_skb: 218 callbacks suppressed Jul 15 11:29:10.008438 kernel: audit: type=1400 audit(1752578950.007:451): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.013003 kernel: audit: type=1400 audit(1752578950.007:452): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.013094 kernel: audit: type=1400 audit(1752578950.007:453): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.016337 kernel: audit: type=1400 audit(1752578950.007:454): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.022344 kernel: audit: type=1400 audit(1752578950.007:455): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.023492 systemd[1]: Started cri-containerd-e82c4083b9d102dc0f40bee08b6c53ac3393683f34bc2ac899f4e597ad807f9d.scope. Jul 15 11:29:10.030352 kernel: audit: type=1400 audit(1752578950.007:456): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.030386 kernel: audit: type=1400 audit(1752578950.007:457): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.030410 kernel: audit: type=1400 audit(1752578950.007:458): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.007000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.036374 kernel: audit: type=1400 audit(1752578950.007:459): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.040357 systemd[1]: Started cri-containerd-f2a21d2823cdaf72d57fe53dccc81b451f7c64b7bbaaa89e2c503b3a7e4ce09d.scope. Jul 15 11:29:10.007000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.007000 audit: BPF prog-id=58 op=LOAD Jul 15 11:29:10.015000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.015000 audit[1811]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1797 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438363536393530386439356362366139386236313664663535376632 Jul 15 11:29:10.015000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.015000 audit[1811]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=1797 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.015000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438363536393530386439356362366139386236313664663535376632 Jul 15 11:29:10.016000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.016000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.016000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.016000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.016000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.016000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.016000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.016000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.016000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.016000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.016000 audit: BPF prog-id=59 op=LOAD Jul 15 11:29:10.016000 audit[1811]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000f9d90 items=0 ppid=1797 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.016000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438363536393530386439356362366139386236313664663535376632 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit: BPF prog-id=60 op=LOAD Jul 15 11:29:10.018000 audit[1811]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000f9dd8 items=0 ppid=1797 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438363536393530386439356362366139386236313664663535376632 Jul 15 11:29:10.018000 audit: BPF prog-id=60 op=UNLOAD Jul 15 11:29:10.018000 audit: BPF prog-id=59 op=UNLOAD Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.044351 kernel: audit: type=1400 audit(1752578950.007:460): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { perfmon } for pid=1811 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit[1811]: AVC avc: denied { bpf } for pid=1811 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.018000 audit: BPF prog-id=61 op=LOAD Jul 15 11:29:10.018000 audit[1811]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0002ec1e8 items=0 ppid=1797 pid=1811 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.018000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3438363536393530386439356362366139386236313664663535376632 Jul 15 11:29:10.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.045000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.045000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.045000 audit: BPF prog-id=62 op=LOAD Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1840 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538326334303833623964313032646330663430626565303862366335 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=1840 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538326334303833623964313032646330663430626565303862366335 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit: BPF prog-id=63 op=LOAD Jul 15 11:29:10.046000 audit[1853]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c0003f49e0 items=0 ppid=1840 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538326334303833623964313032646330663430626565303862366335 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.046000 audit: BPF prog-id=64 op=LOAD Jul 15 11:29:10.046000 audit[1853]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c0003f4a28 items=0 ppid=1840 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.046000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538326334303833623964313032646330663430626565303862366335 Jul 15 11:29:10.050000 audit: BPF prog-id=64 op=UNLOAD Jul 15 11:29:10.050000 audit: BPF prog-id=63 op=UNLOAD Jul 15 11:29:10.050000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.050000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.050000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.050000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.050000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.050000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.050000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.050000 audit[1853]: AVC avc: denied { perfmon } for pid=1853 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.050000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.050000 audit[1853]: AVC avc: denied { bpf } for pid=1853 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.050000 audit: BPF prog-id=65 op=LOAD Jul 15 11:29:10.050000 audit[1853]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c0003f4e38 items=0 ppid=1840 pid=1853 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6538326334303833623964313032646330663430626565303862366335 Jul 15 11:29:10.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.053000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.053000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.053000 audit: BPF prog-id=66 op=LOAD Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0000d7c48 a2=10 a3=1c items=0 ppid=1820 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613231643238323363646166373264353766653533646363633831 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0000d76b0 a2=3c a3=c items=0 ppid=1820 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613231643238323363646166373264353766653533646363633831 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit: BPF prog-id=67 op=LOAD Jul 15 11:29:10.054000 audit[1855]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0000d79d8 a2=78 a3=c0003fe8f0 items=0 ppid=1820 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613231643238323363646166373264353766653533646363633831 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.054000 audit: BPF prog-id=68 op=LOAD Jul 15 11:29:10.054000 audit[1855]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0000d7770 a2=78 a3=c0003fe938 items=0 ppid=1820 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.054000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613231643238323363646166373264353766653533646363633831 Jul 15 11:29:10.055000 audit: BPF prog-id=68 op=UNLOAD Jul 15 11:29:10.055000 audit: BPF prog-id=67 op=UNLOAD Jul 15 11:29:10.055000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.055000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.055000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.055000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.055000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.055000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.055000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.055000 audit[1855]: AVC avc: denied { perfmon } for pid=1855 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.055000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.055000 audit[1855]: AVC avc: denied { bpf } for pid=1855 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.055000 audit: BPF prog-id=69 op=LOAD Jul 15 11:29:10.055000 audit[1855]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0000d7c30 a2=78 a3=c0003fed48 items=0 ppid=1820 pid=1855 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.055000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6632613231643238323363646166373264353766653533646363633831 Jul 15 11:29:10.069401 env[1251]: time="2025-07-15T11:29:10.069373530Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-controller-manager-localhost,Uid:84b858ec27c8b2738b1d9ff9927e0dcb,Namespace:kube-system,Attempt:0,} returns sandbox id \"486569508d95cb6a98b616df557f2b505cb608f7851f58cb36ad59bbb823e1fc\"" Jul 15 11:29:10.074124 env[1251]: time="2025-07-15T11:29:10.074103934Z" level=info msg="CreateContainer within sandbox \"486569508d95cb6a98b616df557f2b505cb608f7851f58cb36ad59bbb823e1fc\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:0,}" Jul 15 11:29:10.082151 env[1251]: time="2025-07-15T11:29:10.082127360Z" level=info msg="CreateContainer within sandbox \"486569508d95cb6a98b616df557f2b505cb608f7851f58cb36ad59bbb823e1fc\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:0,} returns container id \"6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7\"" Jul 15 11:29:10.082667 env[1251]: time="2025-07-15T11:29:10.082653271Z" level=info msg="StartContainer for \"6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7\"" Jul 15 11:29:10.086922 env[1251]: time="2025-07-15T11:29:10.086905591Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-apiserver-localhost,Uid:b47365809593e24dce17091a932a2e5f,Namespace:kube-system,Attempt:0,} returns sandbox id \"f2a21d2823cdaf72d57fe53dccc81b451f7c64b7bbaaa89e2c503b3a7e4ce09d\"" Jul 15 11:29:10.089015 env[1251]: time="2025-07-15T11:29:10.088996274Z" level=info msg="CreateContainer within sandbox \"f2a21d2823cdaf72d57fe53dccc81b451f7c64b7bbaaa89e2c503b3a7e4ce09d\" for container &ContainerMetadata{Name:kube-apiserver,Attempt:0,}" Jul 15 11:29:10.089209 env[1251]: time="2025-07-15T11:29:10.089191395Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-scheduler-localhost,Uid:834ee54f1daa06092e339273649eb5ea,Namespace:kube-system,Attempt:0,} returns sandbox id \"e82c4083b9d102dc0f40bee08b6c53ac3393683f34bc2ac899f4e597ad807f9d\"" Jul 15 11:29:10.090724 env[1251]: time="2025-07-15T11:29:10.090708314Z" level=info msg="CreateContainer within sandbox \"e82c4083b9d102dc0f40bee08b6c53ac3393683f34bc2ac899f4e597ad807f9d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:0,}" Jul 15 11:29:10.095996 env[1251]: time="2025-07-15T11:29:10.095961567Z" level=info msg="CreateContainer within sandbox \"f2a21d2823cdaf72d57fe53dccc81b451f7c64b7bbaaa89e2c503b3a7e4ce09d\" for &ContainerMetadata{Name:kube-apiserver,Attempt:0,} returns container id \"2faf162692a0e52db63f3300062337971c5088e09c8fbdafe1f495c9a9221dfd\"" Jul 15 11:29:10.096305 env[1251]: time="2025-07-15T11:29:10.096287301Z" level=info msg="StartContainer for \"2faf162692a0e52db63f3300062337971c5088e09c8fbdafe1f495c9a9221dfd\"" Jul 15 11:29:10.097683 env[1251]: time="2025-07-15T11:29:10.097665764Z" level=info msg="CreateContainer within sandbox \"e82c4083b9d102dc0f40bee08b6c53ac3393683f34bc2ac899f4e597ad807f9d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:0,} returns container id \"60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab\"" Jul 15 11:29:10.097875 env[1251]: time="2025-07-15T11:29:10.097860195Z" level=info msg="StartContainer for \"60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab\"" Jul 15 11:29:10.103320 systemd[1]: Started cri-containerd-6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7.scope. Jul 15 11:29:10.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.120000 audit: BPF prog-id=70 op=LOAD Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1797 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661646234373430653265393264313331356434363537393465653733 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1797 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661646234373430653265393264313331356434363537393465653733 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit: BPF prog-id=71 op=LOAD Jul 15 11:29:10.121000 audit[1927]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0002e7dc0 items=0 ppid=1797 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661646234373430653265393264313331356434363537393465653733 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.121000 audit: BPF prog-id=72 op=LOAD Jul 15 11:29:10.121000 audit[1927]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0002e7e08 items=0 ppid=1797 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.121000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661646234373430653265393264313331356434363537393465653733 Jul 15 11:29:10.122000 audit: BPF prog-id=72 op=UNLOAD Jul 15 11:29:10.122000 audit: BPF prog-id=71 op=UNLOAD Jul 15 11:29:10.122000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.122000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.122000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.122000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.122000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.122000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.122000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.122000 audit[1927]: AVC avc: denied { perfmon } for pid=1927 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.122000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.122000 audit[1927]: AVC avc: denied { bpf } for pid=1927 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.122000 audit: BPF prog-id=73 op=LOAD Jul 15 11:29:10.122000 audit[1927]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003c6218 items=0 ppid=1797 pid=1927 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.122000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3661646234373430653265393264313331356434363537393465653733 Jul 15 11:29:10.124732 systemd[1]: Started cri-containerd-2faf162692a0e52db63f3300062337971c5088e09c8fbdafe1f495c9a9221dfd.scope. Jul 15 11:29:10.128502 systemd[1]: Started cri-containerd-60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab.scope. Jul 15 11:29:10.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.141000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.141000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.141000 audit: BPF prog-id=74 op=LOAD Jul 15 11:29:10.141000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.141000 audit[1949]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1820 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.141000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266616631363236393261306535326462363366333330303036323333 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=1820 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266616631363236393261306535326462363366333330303036323333 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit: BPF prog-id=75 op=LOAD Jul 15 11:29:10.142000 audit[1949]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000358bf0 items=0 ppid=1820 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266616631363236393261306535326462363366333330303036323333 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit: BPF prog-id=76 op=LOAD Jul 15 11:29:10.142000 audit[1949]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000358c38 items=0 ppid=1820 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266616631363236393261306535326462363366333330303036323333 Jul 15 11:29:10.142000 audit: BPF prog-id=76 op=UNLOAD Jul 15 11:29:10.142000 audit: BPF prog-id=75 op=UNLOAD Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { perfmon } for pid=1949 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit[1949]: AVC avc: denied { bpf } for pid=1949 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.142000 audit: BPF prog-id=77 op=LOAD Jul 15 11:29:10.142000 audit[1949]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000359048 items=0 ppid=1820 pid=1949 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3266616631363236393261306535326462363366333330303036323333 Jul 15 11:29:10.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.143000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.143000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.143000 audit: BPF prog-id=78 op=LOAD Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1840 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630333036633565393238336137343664386665353261633262306365 Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1840 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630333036633565393238336137343664386665353261633262306365 Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.144000 audit: BPF prog-id=79 op=LOAD Jul 15 11:29:10.144000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000310370 items=0 ppid=1840 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.144000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630333036633565393238336137343664386665353261633262306365 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit: BPF prog-id=80 op=LOAD Jul 15 11:29:10.145000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003103b8 items=0 ppid=1840 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630333036633565393238336137343664386665353261633262306365 Jul 15 11:29:10.145000 audit: BPF prog-id=80 op=UNLOAD Jul 15 11:29:10.145000 audit: BPF prog-id=79 op=UNLOAD Jul 15 11:29:10.146366 kubelet[1756]: E0715 11:29:10.146345 1756 reflector.go:200] "Failed to watch" err="failed to list *v1.Node: Get \"https://139.178.70.108:6443/api/v1/nodes?fieldSelector=metadata.name%3Dlocalhost&limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { perfmon } for pid=1953 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit[1953]: AVC avc: denied { bpf } for pid=1953 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:10.145000 audit: BPF prog-id=81 op=LOAD Jul 15 11:29:10.145000 audit[1953]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003107c8 items=0 ppid=1840 pid=1953 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:10.145000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3630333036633565393238336137343664386665353261633262306365 Jul 15 11:29:10.174130 env[1251]: time="2025-07-15T11:29:10.174107120Z" level=info msg="StartContainer for \"60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab\" returns successfully" Jul 15 11:29:10.174334 env[1251]: time="2025-07-15T11:29:10.174247125Z" level=info msg="StartContainer for \"6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7\" returns successfully" Jul 15 11:29:10.180728 env[1251]: time="2025-07-15T11:29:10.180697217Z" level=info msg="StartContainer for \"2faf162692a0e52db63f3300062337971c5088e09c8fbdafe1f495c9a9221dfd\" returns successfully" Jul 15 11:29:10.397679 kubelet[1756]: E0715 11:29:10.397594 1756 controller.go:145] "Failed to ensure lease exists, will retry" err="Get \"https://139.178.70.108:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": dial tcp 139.178.70.108:6443: connect: connection refused" interval="1.6s" Jul 15 11:29:10.490564 kubelet[1756]: E0715 11:29:10.490539 1756 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: Get \"https://139.178.70.108:6443/api/v1/services?fieldSelector=spec.clusterIP%21%3DNone&limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 15 11:29:10.537693 kubelet[1756]: I0715 11:29:10.537634 1756 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:29:10.537861 kubelet[1756]: E0715 11:29:10.537842 1756 kubelet_node_status.go:107] "Unable to register node with API server" err="Post \"https://139.178.70.108:6443/api/v1/nodes\": dial tcp 139.178.70.108:6443: connect: connection refused" node="localhost" Jul 15 11:29:10.575187 kubelet[1756]: E0715 11:29:10.575160 1756 reflector.go:200] "Failed to watch" err="failed to list *v1.CSIDriver: Get \"https://139.178.70.108:6443/apis/storage.k8s.io/v1/csidrivers?limit=500&resourceVersion=0\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" Jul 15 11:29:10.951483 kubelet[1756]: E0715 11:29:10.951453 1756 certificate_manager.go:596] "Failed while requesting a signed certificate from the control plane" err="cannot create certificate signing request: Post \"https://139.178.70.108:6443/apis/certificates.k8s.io/v1/certificatesigningrequests\": dial tcp 139.178.70.108:6443: connect: connection refused" logger="kubernetes.io/kube-apiserver-client-kubelet.UnhandledError" Jul 15 11:29:11.033313 kubelet[1756]: E0715 11:29:11.033197 1756 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:29:11.034572 kubelet[1756]: E0715 11:29:11.034491 1756 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:29:11.035814 kubelet[1756]: E0715 11:29:11.035804 1756 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:29:12.037726 kubelet[1756]: E0715 11:29:12.037710 1756 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:29:12.038243 kubelet[1756]: E0715 11:29:12.038235 1756 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:29:12.138721 kubelet[1756]: I0715 11:29:12.138700 1756 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:29:12.167000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:12.167000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c00088ddd0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:29:12.167000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:29:12.172000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:12.172000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00011a480 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:29:12.172000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:29:12.795000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:12.795000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c00421aac0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:29:12.795000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:29:12.796000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:12.796000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c004889500 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:29:12.796000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:29:12.796000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:12.796000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=42 a1=c004889590 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:29:12.796000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:29:12.903000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:12.903000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=55 a1=c0048899b0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:29:12.903000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:29:12.922000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:12.922000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c003ef2100 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:29:12.922000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:29:12.922000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:12.922000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=71 a1=c0070dec60 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:29:12.922000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:29:13.008670 kubelet[1756]: E0715 11:29:13.008648 1756 nodelease.go:49] "Failed to get node when trying to set owner ref to the node lease" err="nodes \"localhost\" not found" node="localhost" Jul 15 11:29:13.039577 kubelet[1756]: E0715 11:29:13.039549 1756 kubelet.go:3305] "No need to create a mirror pod, since failed to get node info from the cluster" err="node \"localhost\" not found" node="localhost" Jul 15 11:29:13.201198 kubelet[1756]: I0715 11:29:13.201105 1756 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:29:13.201198 kubelet[1756]: E0715 11:29:13.201140 1756 kubelet_node_status.go:548] "Error updating node status, will retry" err="error getting node \"localhost\": node \"localhost\" not found" Jul 15 11:29:13.291179 kubelet[1756]: I0715 11:29:13.291145 1756 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:13.381399 kubelet[1756]: E0715 11:29:13.381373 1756 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-controller-manager-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:13.381535 kubelet[1756]: I0715 11:29:13.381524 1756 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:29:13.383296 kubelet[1756]: E0715 11:29:13.383280 1756 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-scheduler-localhost" Jul 15 11:29:13.383404 kubelet[1756]: I0715 11:29:13.383393 1756 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:29:13.385050 kubelet[1756]: E0715 11:29:13.385029 1756 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" is forbidden: no PriorityClass with name system-node-critical was found" pod="kube-system/kube-apiserver-localhost" Jul 15 11:29:13.963838 kubelet[1756]: I0715 11:29:13.963817 1756 apiserver.go:52] "Watching apiserver" Jul 15 11:29:13.994380 kubelet[1756]: I0715 11:29:13.994359 1756 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:29:14.884214 systemd[1]: Reloading. Jul 15 11:29:14.948035 /usr/lib/systemd/system-generators/torcx-generator[2058]: time="2025-07-15T11:29:14Z" level=debug msg="common configuration parsed" base_dir=/var/lib/torcx/ conf_dir=/etc/torcx/ run_dir=/run/torcx/ store_paths="[/usr/share/torcx/store /usr/share/oem/torcx/store/3510.3.100 /usr/share/oem/torcx/store /var/lib/torcx/store/3510.3.100 /var/lib/torcx/store]" Jul 15 11:29:14.948052 /usr/lib/systemd/system-generators/torcx-generator[2058]: time="2025-07-15T11:29:14Z" level=info msg="torcx already run" Jul 15 11:29:14.999420 systemd[1]: /usr/lib/systemd/system/locksmithd.service:8: Unit uses CPUShares=; please use CPUWeight= instead. Support for CPUShares= will be removed soon. Jul 15 11:29:14.999539 systemd[1]: /usr/lib/systemd/system/locksmithd.service:9: Unit uses MemoryLimit=; please use MemoryMax= instead. Support for MemoryLimit= will be removed soon. Jul 15 11:29:15.019115 systemd[1]: /run/systemd/system/docker.socket:8: ListenStream= references a path below legacy directory /var/run/, updating /var/run/docker.sock → /run/docker.sock; please update the unit file accordingly. Jul 15 11:29:15.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.090915 kernel: kauditd_printk_skb: 356 callbacks suppressed Jul 15 11:29:15.090963 kernel: audit: type=1400 audit(1752578955.089:567): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.095605 kernel: audit: type=1400 audit(1752578955.089:568): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.095641 kernel: audit: type=1400 audit(1752578955.090:569): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.100503 kernel: audit: type=1400 audit(1752578955.090:570): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.100553 kernel: audit: type=1400 audit(1752578955.090:571): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.107753 kernel: audit: type=1400 audit(1752578955.090:572): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.107796 kernel: audit: type=1400 audit(1752578955.090:573): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.107821 kernel: audit: type=1400 audit(1752578955.090:574): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.090000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.110105 kernel: audit: type=1400 audit(1752578955.090:575): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.090000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.112568 kernel: audit: type=1400 audit(1752578955.097:576): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.097000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.097000 audit: BPF prog-id=82 op=LOAD Jul 15 11:29:15.097000 audit: BPF prog-id=43 op=UNLOAD Jul 15 11:29:15.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.099000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.099000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.107000 audit: BPF prog-id=83 op=LOAD Jul 15 11:29:15.107000 audit: BPF prog-id=74 op=UNLOAD Jul 15 11:29:15.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.107000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.108000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.108000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.114000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.114000 audit: BPF prog-id=84 op=LOAD Jul 15 11:29:15.114000 audit: BPF prog-id=58 op=UNLOAD Jul 15 11:29:15.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.115000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.115000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.115000 audit: BPF prog-id=85 op=LOAD Jul 15 11:29:15.115000 audit: BPF prog-id=44 op=UNLOAD Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit: BPF prog-id=86 op=LOAD Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit: BPF prog-id=87 op=LOAD Jul 15 11:29:15.116000 audit: BPF prog-id=45 op=UNLOAD Jul 15 11:29:15.116000 audit: BPF prog-id=46 op=UNLOAD Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.116000 audit: BPF prog-id=88 op=LOAD Jul 15 11:29:15.116000 audit: BPF prog-id=47 op=UNLOAD Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit: BPF prog-id=89 op=LOAD Jul 15 11:29:15.117000 audit: BPF prog-id=62 op=UNLOAD Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.117000 audit: BPF prog-id=90 op=LOAD Jul 15 11:29:15.117000 audit: BPF prog-id=70 op=UNLOAD Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit: BPF prog-id=91 op=LOAD Jul 15 11:29:15.118000 audit: BPF prog-id=48 op=UNLOAD Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.118000 audit: BPF prog-id=92 op=LOAD Jul 15 11:29:15.118000 audit: BPF prog-id=66 op=UNLOAD Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit: BPF prog-id=93 op=LOAD Jul 15 11:29:15.119000 audit: BPF prog-id=49 op=UNLOAD Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit: BPF prog-id=94 op=LOAD Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit: BPF prog-id=95 op=LOAD Jul 15 11:29:15.119000 audit: BPF prog-id=50 op=UNLOAD Jul 15 11:29:15.119000 audit: BPF prog-id=51 op=UNLOAD Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.119000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit: BPF prog-id=96 op=LOAD Jul 15 11:29:15.120000 audit: BPF prog-id=78 op=UNLOAD Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit: BPF prog-id=97 op=LOAD Jul 15 11:29:15.120000 audit: BPF prog-id=52 op=UNLOAD Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit: BPF prog-id=98 op=LOAD Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.120000 audit: BPF prog-id=99 op=LOAD Jul 15 11:29:15.120000 audit: BPF prog-id=53 op=UNLOAD Jul 15 11:29:15.120000 audit: BPF prog-id=54 op=UNLOAD Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit: BPF prog-id=100 op=LOAD Jul 15 11:29:15.121000 audit: BPF prog-id=55 op=UNLOAD Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit: BPF prog-id=101 op=LOAD Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:15.121000 audit: BPF prog-id=102 op=LOAD Jul 15 11:29:15.121000 audit: BPF prog-id=56 op=UNLOAD Jul 15 11:29:15.121000 audit: BPF prog-id=57 op=UNLOAD Jul 15 11:29:15.129758 systemd[1]: Stopping kubelet.service... Jul 15 11:29:15.146000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:15.146527 systemd[1]: kubelet.service: Deactivated successfully. Jul 15 11:29:15.146660 systemd[1]: Stopped kubelet.service. Jul 15 11:29:15.148051 systemd[1]: Starting kubelet.service... Jul 15 11:29:17.552364 systemd[1]: Started kubelet.service. Jul 15 11:29:17.552000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=kubelet comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:17.602400 kubelet[2123]: Flag --container-runtime-endpoint has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:29:17.602400 kubelet[2123]: Flag --pod-infra-container-image has been deprecated, will be removed in 1.35. Image garbage collector will get sandbox image information from CRI. Jul 15 11:29:17.602400 kubelet[2123]: Flag --volume-plugin-dir has been deprecated, This parameter should be set via the config file specified by the Kubelet's --config flag. See https://kubernetes.io/docs/tasks/administer-cluster/kubelet-config-file/ for more information. Jul 15 11:29:17.602771 kubelet[2123]: I0715 11:29:17.602472 2123 server.go:212] "--pod-infra-container-image will not be pruned by the image garbage collector in kubelet and should also be set in the remote runtime" Jul 15 11:29:17.615513 kubelet[2123]: I0715 11:29:17.615492 2123 server.go:530] "Kubelet version" kubeletVersion="v1.33.0" Jul 15 11:29:17.615626 kubelet[2123]: I0715 11:29:17.615617 2123 server.go:532] "Golang settings" GOGC="" GOMAXPROCS="" GOTRACEBACK="" Jul 15 11:29:17.615855 kubelet[2123]: I0715 11:29:17.615847 2123 server.go:956] "Client rotation is on, will bootstrap in background" Jul 15 11:29:17.617028 kubelet[2123]: I0715 11:29:17.617018 2123 certificate_store.go:147] "Loading cert/key pair from a file" filePath="/var/lib/kubelet/pki/kubelet-client-current.pem" Jul 15 11:29:17.624396 kubelet[2123]: I0715 11:29:17.624072 2123 dynamic_cafile_content.go:161] "Starting controller" name="client-ca-bundle::/etc/kubernetes/pki/ca.crt" Jul 15 11:29:17.648697 kubelet[2123]: E0715 11:29:17.648675 2123 log.go:32] "RuntimeConfig from runtime service failed" err="rpc error: code = Unimplemented desc = unknown method RuntimeConfig for service runtime.v1.RuntimeService" Jul 15 11:29:17.648815 kubelet[2123]: I0715 11:29:17.648806 2123 server.go:1423] "CRI implementation should be updated to support RuntimeConfig when KubeletCgroupDriverFromCRI feature gate has been enabled. Falling back to using cgroupDriver from kubelet config." Jul 15 11:29:17.651363 kubelet[2123]: I0715 11:29:17.651200 2123 server.go:782] "--cgroups-per-qos enabled, but --cgroup-root was not specified. defaulting to /" Jul 15 11:29:17.651680 kubelet[2123]: I0715 11:29:17.651605 2123 container_manager_linux.go:267] "Container manager verified user specified cgroup-root exists" cgroupRoot=[] Jul 15 11:29:17.651723 kubelet[2123]: I0715 11:29:17.651623 2123 container_manager_linux.go:272] "Creating Container Manager object based on Node Config" nodeConfig={"NodeName":"localhost","RuntimeCgroupsName":"","SystemCgroupsName":"","KubeletCgroupsName":"","KubeletOOMScoreAdj":-999,"ContainerRuntime":"","CgroupsPerQOS":true,"CgroupRoot":"/","CgroupDriver":"systemd","KubeletRootDir":"/var/lib/kubelet","ProtectKernelDefaults":false,"KubeReservedCgroupName":"","SystemReservedCgroupName":"","ReservedSystemCPUs":{},"EnforceNodeAllocatable":{"pods":{}},"KubeReserved":null,"SystemReserved":null,"HardEvictionThresholds":[{"Signal":"memory.available","Operator":"LessThan","Value":{"Quantity":"100Mi","Percentage":0},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.1},"GracePeriod":0,"MinReclaim":null},{"Signal":"nodefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.available","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.15},"GracePeriod":0,"MinReclaim":null},{"Signal":"imagefs.inodesFree","Operator":"LessThan","Value":{"Quantity":null,"Percentage":0.05},"GracePeriod":0,"MinReclaim":null}],"QOSReserved":{},"CPUManagerPolicy":"none","CPUManagerPolicyOptions":null,"TopologyManagerScope":"container","CPUManagerReconcilePeriod":10000000000,"MemoryManagerPolicy":"None","MemoryManagerReservedMemory":null,"PodPidsLimit":-1,"EnforceCPULimits":true,"CPUCFSQuotaPeriod":100000000,"TopologyManagerPolicy":"none","TopologyManagerPolicyOptions":null,"CgroupVersion":2} Jul 15 11:29:17.651723 kubelet[2123]: I0715 11:29:17.651724 2123 topology_manager.go:138] "Creating topology manager with none policy" Jul 15 11:29:17.651852 kubelet[2123]: I0715 11:29:17.651731 2123 container_manager_linux.go:303] "Creating device plugin manager" Jul 15 11:29:17.651852 kubelet[2123]: I0715 11:29:17.651757 2123 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:29:17.651896 kubelet[2123]: I0715 11:29:17.651875 2123 kubelet.go:480] "Attempting to sync node with API server" Jul 15 11:29:17.651896 kubelet[2123]: I0715 11:29:17.651884 2123 kubelet.go:375] "Adding static pod path" path="/etc/kubernetes/manifests" Jul 15 11:29:17.651896 kubelet[2123]: I0715 11:29:17.651896 2123 kubelet.go:386] "Adding apiserver pod source" Jul 15 11:29:17.651950 kubelet[2123]: I0715 11:29:17.651905 2123 apiserver.go:42] "Waiting for node sync before watching apiserver pods" Jul 15 11:29:17.668193 kubelet[2123]: I0715 11:29:17.668171 2123 kuberuntime_manager.go:279] "Container runtime initialized" containerRuntime="containerd" version="1.6.16" apiVersion="v1" Jul 15 11:29:17.672675 kubelet[2123]: I0715 11:29:17.672358 2123 kubelet.go:935] "Not starting ClusterTrustBundle informer because we are in static kubelet mode or the ClusterTrustBundleProjection featuregate is disabled" Jul 15 11:29:17.673699 kubelet[2123]: I0715 11:29:17.673685 2123 watchdog_linux.go:99] "Systemd watchdog is not enabled" Jul 15 11:29:17.673749 kubelet[2123]: I0715 11:29:17.673710 2123 server.go:1289] "Started kubelet" Jul 15 11:29:17.675000 audit[2123]: AVC avc: denied { mac_admin } for pid=2123 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:17.675000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:29:17.675000 audit[2123]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000ac3500 a1=c0008f9ec0 a2=c000ac34d0 a3=25 items=0 ppid=1 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:17.675000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:29:17.676000 audit[2123]: AVC avc: denied { mac_admin } for pid=2123 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:17.676000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:29:17.676000 audit[2123]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000aa06e0 a1=c0008f9ed8 a2=c000ac3590 a3=25 items=0 ppid=1 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:17.676000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:29:17.676677 kubelet[2123]: I0715 11:29:17.676421 2123 kubelet.go:1552] "Unprivileged containerized plugins might not work, could not set selinux context on plugin registration dir" path="/var/lib/kubelet/plugins_registry" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins_registry: invalid argument" Jul 15 11:29:17.676677 kubelet[2123]: I0715 11:29:17.676472 2123 kubelet.go:1556] "Unprivileged containerized plugins might not work, could not set selinux context on plugins dir" path="/var/lib/kubelet/plugins" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/plugins: invalid argument" Jul 15 11:29:17.676677 kubelet[2123]: I0715 11:29:17.676495 2123 fs_resource_analyzer.go:67] "Starting FS ResourceAnalyzer" Jul 15 11:29:17.682176 kubelet[2123]: I0715 11:29:17.682144 2123 server.go:180] "Starting to listen" address="0.0.0.0" port=10250 Jul 15 11:29:17.684414 kubelet[2123]: I0715 11:29:17.684394 2123 server.go:317] "Adding debug handlers to kubelet server" Jul 15 11:29:17.692538 kubelet[2123]: I0715 11:29:17.692023 2123 ratelimit.go:55] "Setting rate limiting for endpoint" service="podresources" qps=100 burstTokens=10 Jul 15 11:29:17.692538 kubelet[2123]: I0715 11:29:17.692283 2123 server.go:255] "Starting to serve the podresources API" endpoint="unix:/var/lib/kubelet/pod-resources/kubelet.sock" Jul 15 11:29:17.692753 kubelet[2123]: I0715 11:29:17.692720 2123 dynamic_serving_content.go:135] "Starting controller" name="kubelet-server-cert-files::/var/lib/kubelet/pki/kubelet.crt::/var/lib/kubelet/pki/kubelet.key" Jul 15 11:29:17.722593 kubelet[2123]: I0715 11:29:17.722568 2123 volume_manager.go:297] "Starting Kubelet Volume Manager" Jul 15 11:29:17.722922 kubelet[2123]: E0715 11:29:17.722742 2123 kubelet_node_status.go:466] "Error getting the current node from lister" err="node \"localhost\" not found" Jul 15 11:29:17.725722 kubelet[2123]: I0715 11:29:17.725701 2123 desired_state_of_world_populator.go:150] "Desired state populator starts to run" Jul 15 11:29:17.727401 kubelet[2123]: I0715 11:29:17.725807 2123 reconciler.go:26] "Reconciler: start to sync state" Jul 15 11:29:17.727552 kubelet[2123]: I0715 11:29:17.727526 2123 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv4" Jul 15 11:29:17.729075 kubelet[2123]: I0715 11:29:17.729063 2123 factory.go:223] Registration of the systemd container factory successfully Jul 15 11:29:17.730538 kubelet[2123]: I0715 11:29:17.730523 2123 factory.go:221] Registration of the crio container factory failed: Get "http://%2Fvar%2Frun%2Fcrio%2Fcrio.sock/info": dial unix /var/run/crio/crio.sock: connect: no such file or directory Jul 15 11:29:17.730803 kubelet[2123]: I0715 11:29:17.730059 2123 kubelet_network_linux.go:49] "Initialized iptables rules." protocol="IPv6" Jul 15 11:29:17.730873 kubelet[2123]: I0715 11:29:17.730866 2123 status_manager.go:230] "Starting to sync pod status with apiserver" Jul 15 11:29:17.730934 kubelet[2123]: I0715 11:29:17.730918 2123 watchdog_linux.go:127] "Systemd watchdog is not enabled or the interval is invalid, so health checking will not be started." Jul 15 11:29:17.730984 kubelet[2123]: I0715 11:29:17.730977 2123 kubelet.go:2436] "Starting kubelet main sync loop" Jul 15 11:29:17.731564 kubelet[2123]: E0715 11:29:17.731552 2123 kubelet.go:2460] "Skipping pod synchronization" err="[container runtime status check may not have completed yet, PLEG is not healthy: pleg has yet to be successful]" Jul 15 11:29:17.735461 kubelet[2123]: I0715 11:29:17.735441 2123 factory.go:223] Registration of the containerd container factory successfully Jul 15 11:29:17.765158 kubelet[2123]: I0715 11:29:17.765137 2123 cpu_manager.go:221] "Starting CPU manager" policy="none" Jul 15 11:29:17.765271 kubelet[2123]: I0715 11:29:17.765262 2123 cpu_manager.go:222] "Reconciling" reconcilePeriod="10s" Jul 15 11:29:17.765372 kubelet[2123]: I0715 11:29:17.765365 2123 state_mem.go:36] "Initialized new in-memory state store" Jul 15 11:29:17.765508 kubelet[2123]: I0715 11:29:17.765500 2123 state_mem.go:88] "Updated default CPUSet" cpuSet="" Jul 15 11:29:17.765562 kubelet[2123]: I0715 11:29:17.765547 2123 state_mem.go:96] "Updated CPUSet assignments" assignments={} Jul 15 11:29:17.765605 kubelet[2123]: I0715 11:29:17.765599 2123 policy_none.go:49] "None policy: Start" Jul 15 11:29:17.765651 kubelet[2123]: I0715 11:29:17.765644 2123 memory_manager.go:186] "Starting memorymanager" policy="None" Jul 15 11:29:17.765696 kubelet[2123]: I0715 11:29:17.765689 2123 state_mem.go:35] "Initializing new in-memory state store" Jul 15 11:29:17.765790 kubelet[2123]: I0715 11:29:17.765783 2123 state_mem.go:75] "Updated machine memory state" Jul 15 11:29:17.776237 kubelet[2123]: E0715 11:29:17.776224 2123 manager.go:517] "Failed to read data from checkpoint" err="checkpoint is not found" checkpoint="kubelet_internal_checkpoint" Jul 15 11:29:17.775000 audit[2123]: AVC avc: denied { mac_admin } for pid=2123 comm="kubelet" capability=33 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:17.775000 audit: SELINUX_ERR op=setxattr invalid_context="system_u:object_r:container_file_t:s0" Jul 15 11:29:17.775000 audit[2123]: SYSCALL arch=c000003e syscall=188 success=no exit=-22 a0=c000efb920 a1=c0009fa1c8 a2=c000efb8f0 a3=25 items=0 ppid=1 pid=2123 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kubelet" exe="/usr/bin/kubelet" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:17.775000 audit: PROCTITLE proctitle=2F7573722F62696E2F6B7562656C6574002D2D626F6F7473747261702D6B756265636F6E6669673D2F6574632F6B756265726E657465732F626F6F7473747261702D6B7562656C65742E636F6E66002D2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F6B7562656C65742E636F6E66002D2D636F6E6669 Jul 15 11:29:17.776545 kubelet[2123]: E0715 11:29:17.776534 2123 server.go:94] "Unprivileged containerized plugins might not work. Could not set selinux context on socket dir" err="setxattr(label=system_u:object_r:container_file_t:s0) /var/lib/kubelet/device-plugins/: invalid argument" path="/var/lib/kubelet/device-plugins/" Jul 15 11:29:17.776668 kubelet[2123]: I0715 11:29:17.776660 2123 eviction_manager.go:189] "Eviction manager: starting control loop" Jul 15 11:29:17.776729 kubelet[2123]: I0715 11:29:17.776709 2123 container_log_manager.go:189] "Initializing container log rotate workers" workers=1 monitorPeriod="10s" Jul 15 11:29:17.777067 kubelet[2123]: I0715 11:29:17.777060 2123 plugin_manager.go:118] "Starting Kubelet Plugin Manager" Jul 15 11:29:17.777661 kubelet[2123]: E0715 11:29:17.777652 2123 eviction_manager.go:267] "eviction manager: failed to check if we have separate container filesystem. Ignoring." err="no imagefs label for configured runtime" Jul 15 11:29:17.834573 kubelet[2123]: I0715 11:29:17.832956 2123 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:29:17.834904 kubelet[2123]: I0715 11:29:17.833036 2123 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:17.835029 kubelet[2123]: I0715 11:29:17.833108 2123 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:29:17.877805 kubelet[2123]: I0715 11:29:17.877790 2123 kubelet_node_status.go:75] "Attempting to register node" node="localhost" Jul 15 11:29:17.911520 kubelet[2123]: I0715 11:29:17.911490 2123 kubelet_node_status.go:124] "Node was previously registered" node="localhost" Jul 15 11:29:17.911617 kubelet[2123]: I0715 11:29:17.911555 2123 kubelet_node_status.go:78] "Successfully registered node" node="localhost" Jul 15 11:29:18.027122 kubelet[2123]: I0715 11:29:18.027095 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvolume-dir\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-flexvolume-dir\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:18.027349 kubelet[2123]: I0715 11:29:18.027322 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-k8s-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:18.027431 kubelet[2123]: I0715 11:29:18.027422 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-kubeconfig\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:18.027511 kubelet[2123]: I0715 11:29:18.027499 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-usr-share-ca-certificates\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:18.027582 kubelet[2123]: I0715 11:29:18.027574 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/b47365809593e24dce17091a932a2e5f-ca-certs\") pod \"kube-apiserver-localhost\" (UID: \"b47365809593e24dce17091a932a2e5f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:29:18.027656 kubelet[2123]: I0715 11:29:18.027648 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"ca-certs\" (UniqueName: \"kubernetes.io/host-path/84b858ec27c8b2738b1d9ff9927e0dcb-ca-certs\") pod \"kube-controller-manager-localhost\" (UID: \"84b858ec27c8b2738b1d9ff9927e0dcb\") " pod="kube-system/kube-controller-manager-localhost" Jul 15 11:29:18.027735 kubelet[2123]: I0715 11:29:18.027725 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubeconfig\" (UniqueName: \"kubernetes.io/host-path/834ee54f1daa06092e339273649eb5ea-kubeconfig\") pod \"kube-scheduler-localhost\" (UID: \"834ee54f1daa06092e339273649eb5ea\") " pod="kube-system/kube-scheduler-localhost" Jul 15 11:29:18.027835 kubelet[2123]: I0715 11:29:18.027817 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"k8s-certs\" (UniqueName: \"kubernetes.io/host-path/b47365809593e24dce17091a932a2e5f-k8s-certs\") pod \"kube-apiserver-localhost\" (UID: \"b47365809593e24dce17091a932a2e5f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:29:18.027929 kubelet[2123]: I0715 11:29:18.027919 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"usr-share-ca-certificates\" (UniqueName: \"kubernetes.io/host-path/b47365809593e24dce17091a932a2e5f-usr-share-ca-certificates\") pod \"kube-apiserver-localhost\" (UID: \"b47365809593e24dce17091a932a2e5f\") " pod="kube-system/kube-apiserver-localhost" Jul 15 11:29:18.302000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:29:18.302000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000991880 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:29:18.302000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:29:18.653104 kubelet[2123]: I0715 11:29:18.653033 2123 apiserver.go:52] "Watching apiserver" Jul 15 11:29:18.726001 kubelet[2123]: I0715 11:29:18.725971 2123 desired_state_of_world_populator.go:158] "Finished populating initial desired state of world" Jul 15 11:29:18.748252 kubelet[2123]: I0715 11:29:18.748237 2123 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-scheduler-localhost" Jul 15 11:29:18.749863 kubelet[2123]: I0715 11:29:18.748666 2123 kubelet.go:3309] "Creating a mirror pod for static pod" pod="kube-system/kube-apiserver-localhost" Jul 15 11:29:18.765882 kubelet[2123]: E0715 11:29:18.765850 2123 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-apiserver-localhost\" already exists" pod="kube-system/kube-apiserver-localhost" Jul 15 11:29:18.775207 kubelet[2123]: E0715 11:29:18.775191 2123 kubelet.go:3311] "Failed creating a mirror pod" err="pods \"kube-scheduler-localhost\" already exists" pod="kube-system/kube-scheduler-localhost" Jul 15 11:29:18.776231 kubelet[2123]: I0715 11:29:18.776206 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-controller-manager-localhost" podStartSLOduration=1.7761990650000001 podStartE2EDuration="1.776199065s" podCreationTimestamp="2025-07-15 11:29:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:29:18.775765058 +0000 UTC m=+1.207314830" watchObservedRunningTime="2025-07-15 11:29:18.776199065 +0000 UTC m=+1.207748831" Jul 15 11:29:18.822477 kubelet[2123]: I0715 11:29:18.822446 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-scheduler-localhost" podStartSLOduration=1.822435977 podStartE2EDuration="1.822435977s" podCreationTimestamp="2025-07-15 11:29:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:29:18.796312108 +0000 UTC m=+1.227861879" watchObservedRunningTime="2025-07-15 11:29:18.822435977 +0000 UTC m=+1.253985748" Jul 15 11:29:18.822646 kubelet[2123]: I0715 11:29:18.822630 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-apiserver-localhost" podStartSLOduration=1.8226255 podStartE2EDuration="1.8226255s" podCreationTimestamp="2025-07-15 11:29:17 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:29:18.821943266 +0000 UTC m=+1.253493032" watchObservedRunningTime="2025-07-15 11:29:18.8226255 +0000 UTC m=+1.254175265" Jul 15 11:29:21.355355 kernel: kauditd_printk_skb: 251 callbacks suppressed Jul 15 11:29:21.355464 kernel: audit: type=1400 audit(1752578961.353:817): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:21.353000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:21.353000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000eccf60 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:29:21.361960 kernel: audit: type=1300 audit(1752578961.353:817): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000eccf60 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:29:21.362059 kernel: audit: type=1327 audit(1752578961.353:817): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:29:21.353000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:29:21.353000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:21.368308 kernel: audit: type=1400 audit(1752578961.353:818): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:21.368362 kernel: audit: type=1300 audit(1752578961.353:818): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000eccfa0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:29:21.353000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000eccfa0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:29:21.353000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:29:21.375704 kernel: audit: type=1327 audit(1752578961.353:818): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:29:21.375771 kernel: audit: type=1400 audit(1752578961.354:819): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:21.354000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:21.354000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000eccfe0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:29:21.382611 kernel: audit: type=1300 audit(1752578961.354:819): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000eccfe0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:29:21.382641 kernel: audit: type=1327 audit(1752578961.354:819): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:29:21.354000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:29:21.354000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:21.388867 kernel: audit: type=1400 audit(1752578961.354:820): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:29:21.354000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000ecd020 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:29:21.354000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:29:21.779722 kubelet[2123]: I0715 11:29:21.779704 2123 kuberuntime_manager.go:1746] "Updating runtime config through cri with podcidr" CIDR="192.168.0.0/24" Jul 15 11:29:21.780266 env[1251]: time="2025-07-15T11:29:21.780239270Z" level=info msg="No cni config template is specified, wait for other system components to drop the config." Jul 15 11:29:21.780525 kubelet[2123]: I0715 11:29:21.780514 2123 kubelet_network.go:61] "Updating Pod CIDR" originalPodCIDR="" newPodCIDR="192.168.0.0/24" Jul 15 11:29:22.745019 systemd[1]: Created slice kubepods-besteffort-podbb796b71_f78d_4cf4_a86e_e5c8db78a406.slice. Jul 15 11:29:22.755432 kubelet[2123]: I0715 11:29:22.755408 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-46j79\" (UniqueName: \"kubernetes.io/projected/bb796b71-f78d-4cf4-a86e-e5c8db78a406-kube-api-access-46j79\") pod \"kube-proxy-gwn56\" (UID: \"bb796b71-f78d-4cf4-a86e-e5c8db78a406\") " pod="kube-system/kube-proxy-gwn56" Jul 15 11:29:22.755593 kubelet[2123]: I0715 11:29:22.755581 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-proxy\" (UniqueName: \"kubernetes.io/configmap/bb796b71-f78d-4cf4-a86e-e5c8db78a406-kube-proxy\") pod \"kube-proxy-gwn56\" (UID: \"bb796b71-f78d-4cf4-a86e-e5c8db78a406\") " pod="kube-system/kube-proxy-gwn56" Jul 15 11:29:22.755677 kubelet[2123]: I0715 11:29:22.755667 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/bb796b71-f78d-4cf4-a86e-e5c8db78a406-xtables-lock\") pod \"kube-proxy-gwn56\" (UID: \"bb796b71-f78d-4cf4-a86e-e5c8db78a406\") " pod="kube-system/kube-proxy-gwn56" Jul 15 11:29:22.755821 kubelet[2123]: I0715 11:29:22.755801 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/bb796b71-f78d-4cf4-a86e-e5c8db78a406-lib-modules\") pod \"kube-proxy-gwn56\" (UID: \"bb796b71-f78d-4cf4-a86e-e5c8db78a406\") " pod="kube-system/kube-proxy-gwn56" Jul 15 11:29:22.868179 kubelet[2123]: I0715 11:29:22.868161 2123 swap_util.go:74] "error creating dir to test if tmpfs noswap is enabled. Assuming not supported" mount path="" error="stat /var/lib/kubelet/plugins/kubernetes.io/empty-dir: no such file or directory" Jul 15 11:29:22.933551 systemd[1]: Created slice kubepods-besteffort-podeaf7fd0f_e676_40ee_9107_2612911d9533.slice. Jul 15 11:29:22.957257 kubelet[2123]: I0715 11:29:22.957232 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-8k72t\" (UniqueName: \"kubernetes.io/projected/eaf7fd0f-e676-40ee-9107-2612911d9533-kube-api-access-8k72t\") pod \"tigera-operator-747864d56d-k4w6z\" (UID: \"eaf7fd0f-e676-40ee-9107-2612911d9533\") " pod="tigera-operator/tigera-operator-747864d56d-k4w6z" Jul 15 11:29:22.957429 kubelet[2123]: I0715 11:29:22.957414 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/eaf7fd0f-e676-40ee-9107-2612911d9533-var-lib-calico\") pod \"tigera-operator-747864d56d-k4w6z\" (UID: \"eaf7fd0f-e676-40ee-9107-2612911d9533\") " pod="tigera-operator/tigera-operator-747864d56d-k4w6z" Jul 15 11:29:23.051010 env[1251]: time="2025-07-15T11:29:23.050975613Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-gwn56,Uid:bb796b71-f78d-4cf4-a86e-e5c8db78a406,Namespace:kube-system,Attempt:0,}" Jul 15 11:29:23.066875 env[1251]: time="2025-07-15T11:29:23.063381536Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:29:23.066875 env[1251]: time="2025-07-15T11:29:23.063402527Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:29:23.066875 env[1251]: time="2025-07-15T11:29:23.063409387Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:29:23.066875 env[1251]: time="2025-07-15T11:29:23.063486649Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4554c08c5672d10ad8d74b7ead74b8134ecd80a8e7fe99ddd038138ed2ef35e5 pid=2176 runtime=io.containerd.runc.v2 Jul 15 11:29:23.076700 systemd[1]: Started cri-containerd-4554c08c5672d10ad8d74b7ead74b8134ecd80a8e7fe99ddd038138ed2ef35e5.scope. Jul 15 11:29:23.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.088000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.088000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit: BPF prog-id=103 op=LOAD Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2176 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435353463303863353637326431306164386437346237656164373462 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2176 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435353463303863353637326431306164386437346237656164373462 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit: BPF prog-id=104 op=LOAD Jul 15 11:29:23.089000 audit[2185]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0001dde20 items=0 ppid=2176 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435353463303863353637326431306164386437346237656164373462 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit: BPF prog-id=105 op=LOAD Jul 15 11:29:23.089000 audit[2185]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0001dde68 items=0 ppid=2176 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435353463303863353637326431306164386437346237656164373462 Jul 15 11:29:23.089000 audit: BPF prog-id=105 op=UNLOAD Jul 15 11:29:23.089000 audit: BPF prog-id=104 op=UNLOAD Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { perfmon } for pid=2185 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit[2185]: AVC avc: denied { bpf } for pid=2185 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.089000 audit: BPF prog-id=106 op=LOAD Jul 15 11:29:23.089000 audit[2185]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000396278 items=0 ppid=2176 pid=2185 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.089000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3435353463303863353637326431306164386437346237656164373462 Jul 15 11:29:23.097735 env[1251]: time="2025-07-15T11:29:23.097708362Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:kube-proxy-gwn56,Uid:bb796b71-f78d-4cf4-a86e-e5c8db78a406,Namespace:kube-system,Attempt:0,} returns sandbox id \"4554c08c5672d10ad8d74b7ead74b8134ecd80a8e7fe99ddd038138ed2ef35e5\"" Jul 15 11:29:23.109171 env[1251]: time="2025-07-15T11:29:23.109148478Z" level=info msg="CreateContainer within sandbox \"4554c08c5672d10ad8d74b7ead74b8134ecd80a8e7fe99ddd038138ed2ef35e5\" for container &ContainerMetadata{Name:kube-proxy,Attempt:0,}" Jul 15 11:29:23.116795 env[1251]: time="2025-07-15T11:29:23.116764281Z" level=info msg="CreateContainer within sandbox \"4554c08c5672d10ad8d74b7ead74b8134ecd80a8e7fe99ddd038138ed2ef35e5\" for &ContainerMetadata{Name:kube-proxy,Attempt:0,} returns container id \"27357cbf38ec136438ed95b1cdf8d2154d724fc17097ba9b8559724e73c303ac\"" Jul 15 11:29:23.118054 env[1251]: time="2025-07-15T11:29:23.117405437Z" level=info msg="StartContainer for \"27357cbf38ec136438ed95b1cdf8d2154d724fc17097ba9b8559724e73c303ac\"" Jul 15 11:29:23.127462 systemd[1]: Started cri-containerd-27357cbf38ec136438ed95b1cdf8d2154d724fc17097ba9b8559724e73c303ac.scope. Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bf6b0 a2=3c a3=7fb4849c2108 items=0 ppid=2176 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237333537636266333865633133363433386564393562316364663864 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit: BPF prog-id=107 op=LOAD Jul 15 11:29:23.142000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bf9d8 a2=78 a3=c0002d5c88 items=0 ppid=2176 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237333537636266333865633133363433386564393562316364663864 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit: BPF prog-id=108 op=LOAD Jul 15 11:29:23.142000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bf770 a2=78 a3=c0002d5cd8 items=0 ppid=2176 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237333537636266333865633133363433386564393562316364663864 Jul 15 11:29:23.142000 audit: BPF prog-id=108 op=UNLOAD Jul 15 11:29:23.142000 audit: BPF prog-id=107 op=UNLOAD Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { perfmon } for pid=2220 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit[2220]: AVC avc: denied { bpf } for pid=2220 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.142000 audit: BPF prog-id=109 op=LOAD Jul 15 11:29:23.142000 audit[2220]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bfc30 a2=78 a3=c0002d5d68 items=0 ppid=2176 pid=2220 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.142000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3237333537636266333865633133363433386564393562316364663864 Jul 15 11:29:23.155581 env[1251]: time="2025-07-15T11:29:23.155555365Z" level=info msg="StartContainer for \"27357cbf38ec136438ed95b1cdf8d2154d724fc17097ba9b8559724e73c303ac\" returns successfully" Jul 15 11:29:23.236589 env[1251]: time="2025-07-15T11:29:23.236562042Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-k4w6z,Uid:eaf7fd0f-e676-40ee-9107-2612911d9533,Namespace:tigera-operator,Attempt:0,}" Jul 15 11:29:23.273933 env[1251]: time="2025-07-15T11:29:23.273868497Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:29:23.274088 env[1251]: time="2025-07-15T11:29:23.274054393Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:29:23.274184 env[1251]: time="2025-07-15T11:29:23.274078998Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:29:23.274686 env[1251]: time="2025-07-15T11:29:23.274641228Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/ee953945c3b30cffd21ce4f184545c9e3482100fc3c6a770f2292614cb1d1424 pid=2253 runtime=io.containerd.runc.v2 Jul 15 11:29:23.286199 systemd[1]: Started cri-containerd-ee953945c3b30cffd21ce4f184545c9e3482100fc3c6a770f2292614cb1d1424.scope. Jul 15 11:29:23.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.297000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.297000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.297000 audit: BPF prog-id=110 op=LOAD Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2253 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565393533393435633362333063666664323163653466313834353435 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2253 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565393533393435633362333063666664323163653466313834353435 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit: BPF prog-id=111 op=LOAD Jul 15 11:29:23.298000 audit[2263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0003e8850 items=0 ppid=2253 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565393533393435633362333063666664323163653466313834353435 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.298000 audit: BPF prog-id=112 op=LOAD Jul 15 11:29:23.298000 audit[2263]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c0003e8898 items=0 ppid=2253 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.298000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565393533393435633362333063666664323163653466313834353435 Jul 15 11:29:23.299000 audit: BPF prog-id=112 op=UNLOAD Jul 15 11:29:23.299000 audit: BPF prog-id=111 op=UNLOAD Jul 15 11:29:23.299000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.299000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.299000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.299000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.299000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.299000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.299000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.299000 audit[2263]: AVC avc: denied { perfmon } for pid=2263 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.299000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.299000 audit[2263]: AVC avc: denied { bpf } for pid=2263 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:23.299000 audit: BPF prog-id=113 op=LOAD Jul 15 11:29:23.299000 audit[2263]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c0003e8ca8 items=0 ppid=2253 pid=2263 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6565393533393435633362333063666664323163653466313834353435 Jul 15 11:29:23.331695 env[1251]: time="2025-07-15T11:29:23.329394829Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:tigera-operator-747864d56d-k4w6z,Uid:eaf7fd0f-e676-40ee-9107-2612911d9533,Namespace:tigera-operator,Attempt:0,} returns sandbox id \"ee953945c3b30cffd21ce4f184545c9e3482100fc3c6a770f2292614cb1d1424\"" Jul 15 11:29:23.333477 env[1251]: time="2025-07-15T11:29:23.333461661Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\"" Jul 15 11:29:23.920000 audit[2326]: NETFILTER_CFG table=mangle:38 family=2 entries=1 op=nft_register_chain pid=2326 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:23.920000 audit[2326]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffebaeb9e20 a2=0 a3=7ffebaeb9e0c items=0 ppid=2231 pid=2326 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.920000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:29:23.920000 audit[2327]: NETFILTER_CFG table=mangle:39 family=10 entries=1 op=nft_register_chain pid=2327 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:23.920000 audit[2327]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffe7e16d4d0 a2=0 a3=7ffe7e16d4bc items=0 ppid=2231 pid=2327 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.920000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006D616E676C65 Jul 15 11:29:23.921000 audit[2329]: NETFILTER_CFG table=nat:40 family=10 entries=1 op=nft_register_chain pid=2329 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:23.921000 audit[2329]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd109556f0 a2=0 a3=7ffd109556dc items=0 ppid=2231 pid=2329 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.921000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:29:23.921000 audit[2328]: NETFILTER_CFG table=nat:41 family=2 entries=1 op=nft_register_chain pid=2328 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:23.921000 audit[2328]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc4cb163b0 a2=0 a3=7ffc4cb1639c items=0 ppid=2231 pid=2328 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.921000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D74006E6174 Jul 15 11:29:23.922000 audit[2330]: NETFILTER_CFG table=filter:42 family=10 entries=1 op=nft_register_chain pid=2330 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:23.922000 audit[2330]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffde4623310 a2=0 a3=7ffde46232fc items=0 ppid=2231 pid=2330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.922000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:29:23.922000 audit[2331]: NETFILTER_CFG table=filter:43 family=2 entries=1 op=nft_register_chain pid=2331 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:23.922000 audit[2331]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffc35540fa0 a2=0 a3=7ffc35540f8c items=0 ppid=2231 pid=2331 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:23.922000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D43414E415259002D740066696C746572 Jul 15 11:29:24.031000 audit[2334]: NETFILTER_CFG table=filter:44 family=2 entries=1 op=nft_register_chain pid=2334 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.031000 audit[2334]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7fffbef4e780 a2=0 a3=7fffbef4e76c items=0 ppid=2231 pid=2334 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.031000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:29:24.033000 audit[2336]: NETFILTER_CFG table=filter:45 family=2 entries=1 op=nft_register_rule pid=2336 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.033000 audit[2336]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd90a98230 a2=0 a3=7ffd90a9821c items=0 ppid=2231 pid=2336 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.033000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276696365 Jul 15 11:29:24.035000 audit[2339]: NETFILTER_CFG table=filter:46 family=2 entries=1 op=nft_register_rule pid=2339 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.035000 audit[2339]: SYSCALL arch=c000003e syscall=46 success=yes exit=752 a0=3 a1=7ffd9fb13590 a2=0 a3=7ffd9fb1357c items=0 ppid=2231 pid=2339 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.035000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C65207365727669 Jul 15 11:29:24.036000 audit[2340]: NETFILTER_CFG table=filter:47 family=2 entries=1 op=nft_register_chain pid=2340 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.036000 audit[2340]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd85f8f750 a2=0 a3=7ffd85f8f73c items=0 ppid=2231 pid=2340 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.036000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:29:24.037000 audit[2342]: NETFILTER_CFG table=filter:48 family=2 entries=1 op=nft_register_rule pid=2342 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.037000 audit[2342]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc0564cb10 a2=0 a3=7ffc0564cafc items=0 ppid=2231 pid=2342 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.037000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:29:24.038000 audit[2343]: NETFILTER_CFG table=filter:49 family=2 entries=1 op=nft_register_chain pid=2343 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.038000 audit[2343]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc0e3ca550 a2=0 a3=7ffc0e3ca53c items=0 ppid=2231 pid=2343 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.038000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:29:24.039000 audit[2345]: NETFILTER_CFG table=filter:50 family=2 entries=1 op=nft_register_rule pid=2345 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.039000 audit[2345]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdb2ff59d0 a2=0 a3=7ffdb2ff59bc items=0 ppid=2231 pid=2345 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.039000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:29:24.041000 audit[2348]: NETFILTER_CFG table=filter:51 family=2 entries=1 op=nft_register_rule pid=2348 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.041000 audit[2348]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffeaec3e100 a2=0 a3=7ffeaec3e0ec items=0 ppid=2231 pid=2348 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.041000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D53 Jul 15 11:29:24.042000 audit[2349]: NETFILTER_CFG table=filter:52 family=2 entries=1 op=nft_register_chain pid=2349 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.042000 audit[2349]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffc50d6fe80 a2=0 a3=7ffc50d6fe6c items=0 ppid=2231 pid=2349 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.042000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:29:24.044000 audit[2351]: NETFILTER_CFG table=filter:53 family=2 entries=1 op=nft_register_rule pid=2351 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.044000 audit[2351]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffdee421fe0 a2=0 a3=7ffdee421fcc items=0 ppid=2231 pid=2351 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.044000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:29:24.044000 audit[2352]: NETFILTER_CFG table=filter:54 family=2 entries=1 op=nft_register_chain pid=2352 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.044000 audit[2352]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7ffcdfb3fce0 a2=0 a3=7ffcdfb3fccc items=0 ppid=2231 pid=2352 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.044000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:29:24.046000 audit[2354]: NETFILTER_CFG table=filter:55 family=2 entries=1 op=nft_register_rule pid=2354 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.046000 audit[2354]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7fffb78090d0 a2=0 a3=7fffb78090bc items=0 ppid=2231 pid=2354 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.046000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:29:24.048000 audit[2357]: NETFILTER_CFG table=filter:56 family=2 entries=1 op=nft_register_rule pid=2357 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.048000 audit[2357]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffebcf1e460 a2=0 a3=7ffebcf1e44c items=0 ppid=2231 pid=2357 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.048000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:29:24.050000 audit[2360]: NETFILTER_CFG table=filter:57 family=2 entries=1 op=nft_register_rule pid=2360 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.050000 audit[2360]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc19992eb0 a2=0 a3=7ffc19992e9c items=0 ppid=2231 pid=2360 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.050000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:29:24.051000 audit[2361]: NETFILTER_CFG table=nat:58 family=2 entries=1 op=nft_register_chain pid=2361 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.051000 audit[2361]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffda134f890 a2=0 a3=7ffda134f87c items=0 ppid=2231 pid=2361 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.051000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:29:24.053000 audit[2363]: NETFILTER_CFG table=nat:59 family=2 entries=1 op=nft_register_rule pid=2363 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.053000 audit[2363]: SYSCALL arch=c000003e syscall=46 success=yes exit=524 a0=3 a1=7ffd7a122060 a2=0 a3=7ffd7a12204c items=0 ppid=2231 pid=2363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.053000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:29:24.054000 audit[2366]: NETFILTER_CFG table=nat:60 family=2 entries=1 op=nft_register_rule pid=2366 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.054000 audit[2366]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7fffc916e080 a2=0 a3=7fffc916e06c items=0 ppid=2231 pid=2366 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.054000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:29:24.055000 audit[2367]: NETFILTER_CFG table=nat:61 family=2 entries=1 op=nft_register_chain pid=2367 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.055000 audit[2367]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffda1c87f80 a2=0 a3=7ffda1c87f6c items=0 ppid=2231 pid=2367 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.055000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:29:24.057000 audit[2369]: NETFILTER_CFG table=nat:62 family=2 entries=1 op=nft_register_rule pid=2369 subj=system_u:system_r:kernel_t:s0 comm="iptables" Jul 15 11:29:24.057000 audit[2369]: SYSCALL arch=c000003e syscall=46 success=yes exit=532 a0=3 a1=7ffe59691510 a2=0 a3=7ffe596914fc items=0 ppid=2231 pid=2369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.057000 audit: PROCTITLE proctitle=69707461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:29:24.076000 audit[2375]: NETFILTER_CFG table=filter:63 family=2 entries=8 op=nft_register_rule pid=2375 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:24.076000 audit[2375]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe79289e70 a2=0 a3=7ffe79289e5c items=0 ppid=2231 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.076000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:24.083000 audit[2375]: NETFILTER_CFG table=nat:64 family=2 entries=14 op=nft_register_chain pid=2375 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:24.083000 audit[2375]: SYSCALL arch=c000003e syscall=46 success=yes exit=5508 a0=3 a1=7ffe79289e70 a2=0 a3=7ffe79289e5c items=0 ppid=2231 pid=2375 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.083000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:24.084000 audit[2380]: NETFILTER_CFG table=filter:65 family=10 entries=1 op=nft_register_chain pid=2380 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.084000 audit[2380]: SYSCALL arch=c000003e syscall=46 success=yes exit=108 a0=3 a1=7ffe27944f40 a2=0 a3=7ffe27944f2c items=0 ppid=2231 pid=2380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.084000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D45585445524E414C2D5345525649434553002D740066696C746572 Jul 15 11:29:24.086000 audit[2382]: NETFILTER_CFG table=filter:66 family=10 entries=2 op=nft_register_chain pid=2382 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.086000 audit[2382]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7ffffb81c2d0 a2=0 a3=7ffffb81c2bc items=0 ppid=2231 pid=2382 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.086000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C6520736572766963 Jul 15 11:29:24.088000 audit[2385]: NETFILTER_CFG table=filter:67 family=10 entries=2 op=nft_register_chain pid=2385 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.088000 audit[2385]: SYSCALL arch=c000003e syscall=46 success=yes exit=836 a0=3 a1=7fff83bdf470 a2=0 a3=7fff83bdf45c items=0 ppid=2231 pid=2385 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.088000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E657465732065787465726E616C6C792D76697369626C652073657276 Jul 15 11:29:24.089000 audit[2386]: NETFILTER_CFG table=filter:68 family=10 entries=1 op=nft_register_chain pid=2386 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.089000 audit[2386]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7fffa88210f0 a2=0 a3=7fffa88210dc items=0 ppid=2231 pid=2386 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.089000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4E4F4445504F525453002D740066696C746572 Jul 15 11:29:24.090000 audit[2388]: NETFILTER_CFG table=filter:69 family=10 entries=1 op=nft_register_rule pid=2388 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.090000 audit[2388]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffe9d15de20 a2=0 a3=7ffe9d15de0c items=0 ppid=2231 pid=2388 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.090000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206865616C746820636865636B207365727669636520706F727473002D6A004B5542452D4E4F4445504F525453 Jul 15 11:29:24.091000 audit[2389]: NETFILTER_CFG table=filter:70 family=10 entries=1 op=nft_register_chain pid=2389 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.091000 audit[2389]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffcf964b2d0 a2=0 a3=7ffcf964b2bc items=0 ppid=2231 pid=2389 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.091000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D740066696C746572 Jul 15 11:29:24.093000 audit[2391]: NETFILTER_CFG table=filter:71 family=10 entries=1 op=nft_register_rule pid=2391 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.093000 audit[2391]: SYSCALL arch=c000003e syscall=46 success=yes exit=744 a0=3 a1=7ffdc9a61990 a2=0 a3=7ffdc9a6197c items=0 ppid=2231 pid=2391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.093000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B554245 Jul 15 11:29:24.095000 audit[2394]: NETFILTER_CFG table=filter:72 family=10 entries=2 op=nft_register_chain pid=2394 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.095000 audit[2394]: SYSCALL arch=c000003e syscall=46 success=yes exit=828 a0=3 a1=7ffedf60fc80 a2=0 a3=7ffedf60fc6c items=0 ppid=2231 pid=2394 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.095000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D Jul 15 11:29:24.096000 audit[2395]: NETFILTER_CFG table=filter:73 family=10 entries=1 op=nft_register_chain pid=2395 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.096000 audit[2395]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe5eeeeab0 a2=0 a3=7ffe5eeeea9c items=0 ppid=2231 pid=2395 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.096000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D464F5257415244002D740066696C746572 Jul 15 11:29:24.097000 audit[2397]: NETFILTER_CFG table=filter:74 family=10 entries=1 op=nft_register_rule pid=2397 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.097000 audit[2397]: SYSCALL arch=c000003e syscall=46 success=yes exit=528 a0=3 a1=7ffc2bdba970 a2=0 a3=7ffc2bdba95c items=0 ppid=2231 pid=2397 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.097000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320666F7277617264696E672072756C6573002D6A004B5542452D464F5257415244 Jul 15 11:29:24.098000 audit[2398]: NETFILTER_CFG table=filter:75 family=10 entries=1 op=nft_register_chain pid=2398 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.098000 audit[2398]: SYSCALL arch=c000003e syscall=46 success=yes exit=104 a0=3 a1=7fff45297b90 a2=0 a3=7fff45297b7c items=0 ppid=2231 pid=2398 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.098000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D50524F58592D4649524557414C4C002D740066696C746572 Jul 15 11:29:24.099000 audit[2400]: NETFILTER_CFG table=filter:76 family=10 entries=1 op=nft_register_rule pid=2400 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.099000 audit[2400]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc32e7d570 a2=0 a3=7ffc32e7d55c items=0 ppid=2231 pid=2400 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.099000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D6A Jul 15 11:29:24.101000 audit[2403]: NETFILTER_CFG table=filter:77 family=10 entries=1 op=nft_register_rule pid=2403 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.101000 audit[2403]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffe2139d8b0 a2=0 a3=7ffe2139d89c items=0 ppid=2231 pid=2403 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.101000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C002D Jul 15 11:29:24.104000 audit[2406]: NETFILTER_CFG table=filter:78 family=10 entries=1 op=nft_register_rule pid=2406 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.104000 audit[2406]: SYSCALL arch=c000003e syscall=46 success=yes exit=748 a0=3 a1=7ffc2f20b3b0 a2=0 a3=7ffc2f20b39c items=0 ppid=2231 pid=2406 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.104000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900464F5257415244002D740066696C746572002D6D00636F6E6E747261636B002D2D63747374617465004E4557002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573206C6F61642062616C616E636572206669726577616C6C Jul 15 11:29:24.104000 audit[2407]: NETFILTER_CFG table=nat:79 family=10 entries=1 op=nft_register_chain pid=2407 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.104000 audit[2407]: SYSCALL arch=c000003e syscall=46 success=yes exit=96 a0=3 a1=7ffd70bbf7f0 a2=0 a3=7ffd70bbf7dc items=0 ppid=2231 pid=2407 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.104000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D5345525649434553002D74006E6174 Jul 15 11:29:24.106000 audit[2409]: NETFILTER_CFG table=nat:80 family=10 entries=2 op=nft_register_chain pid=2409 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.106000 audit[2409]: SYSCALL arch=c000003e syscall=46 success=yes exit=600 a0=3 a1=7ffe33823800 a2=0 a3=7ffe338237ec items=0 ppid=2231 pid=2409 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.106000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:29:24.108000 audit[2412]: NETFILTER_CFG table=nat:81 family=10 entries=2 op=nft_register_chain pid=2412 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.108000 audit[2412]: SYSCALL arch=c000003e syscall=46 success=yes exit=608 a0=3 a1=7ffd15f19e60 a2=0 a3=7ffd15f19e4c items=0 ppid=2231 pid=2412 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.108000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900505245524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E65746573207365727669636520706F7274616C73002D6A004B5542452D5345525649434553 Jul 15 11:29:24.108000 audit[2413]: NETFILTER_CFG table=nat:82 family=10 entries=1 op=nft_register_chain pid=2413 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.108000 audit[2413]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffe27efbe40 a2=0 a3=7ffe27efbe2c items=0 ppid=2231 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.108000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D504F5354524F5554494E47002D74006E6174 Jul 15 11:29:24.110000 audit[2415]: NETFILTER_CFG table=nat:83 family=10 entries=2 op=nft_register_chain pid=2415 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.110000 audit[2415]: SYSCALL arch=c000003e syscall=46 success=yes exit=612 a0=3 a1=7fffb88489e0 a2=0 a3=7fffb88489cc items=0 ppid=2231 pid=2415 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.110000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900504F5354524F5554494E47002D74006E6174002D6D00636F6D6D656E74002D2D636F6D6D656E74006B756265726E6574657320706F7374726F7574696E672072756C6573002D6A004B5542452D504F5354524F5554494E47 Jul 15 11:29:24.111000 audit[2416]: NETFILTER_CFG table=filter:84 family=10 entries=1 op=nft_register_chain pid=2416 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.111000 audit[2416]: SYSCALL arch=c000003e syscall=46 success=yes exit=100 a0=3 a1=7ffd726ec2a0 a2=0 a3=7ffd726ec28c items=0 ppid=2231 pid=2416 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.111000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4E004B5542452D4649524557414C4C002D740066696C746572 Jul 15 11:29:24.112000 audit[2418]: NETFILTER_CFG table=filter:85 family=10 entries=1 op=nft_register_rule pid=2418 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.112000 audit[2418]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7fff2fb16500 a2=0 a3=7fff2fb164ec items=0 ppid=2231 pid=2418 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.112000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D4900494E505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:29:24.114000 audit[2421]: NETFILTER_CFG table=filter:86 family=10 entries=1 op=nft_register_rule pid=2421 subj=system_u:system_r:kernel_t:s0 comm="ip6tables" Jul 15 11:29:24.114000 audit[2421]: SYSCALL arch=c000003e syscall=46 success=yes exit=228 a0=3 a1=7ffdba67d9b0 a2=0 a3=7ffdba67d99c items=0 ppid=2231 pid=2421 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.114000 audit: PROCTITLE proctitle=6970367461626C6573002D770035002D5700313030303030002D49004F5554505554002D740066696C746572002D6A004B5542452D4649524557414C4C Jul 15 11:29:24.116000 audit[2423]: NETFILTER_CFG table=filter:87 family=10 entries=3 op=nft_register_rule pid=2423 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:29:24.116000 audit[2423]: SYSCALL arch=c000003e syscall=46 success=yes exit=2088 a0=3 a1=7ffc24123830 a2=0 a3=7ffc2412381c items=0 ppid=2231 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.116000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:24.116000 audit[2423]: NETFILTER_CFG table=nat:88 family=10 entries=7 op=nft_register_chain pid=2423 subj=system_u:system_r:kernel_t:s0 comm="ip6tables-resto" Jul 15 11:29:24.116000 audit[2423]: SYSCALL arch=c000003e syscall=46 success=yes exit=2056 a0=3 a1=7ffc24123830 a2=0 a3=7ffc2412381c items=0 ppid=2231 pid=2423 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="ip6tables-resto" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:24.116000 audit: PROCTITLE proctitle=6970367461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:24.392649 kubelet[2123]: I0715 11:29:24.392618 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/kube-proxy-gwn56" podStartSLOduration=2.392608217 podStartE2EDuration="2.392608217s" podCreationTimestamp="2025-07-15 11:29:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:29:23.766758955 +0000 UTC m=+6.198308724" watchObservedRunningTime="2025-07-15 11:29:24.392608217 +0000 UTC m=+6.824157982" Jul 15 11:29:24.689723 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount979552100.mount: Deactivated successfully. Jul 15 11:29:25.242076 env[1251]: time="2025-07-15T11:29:25.242054842Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:25.243205 env[1251]: time="2025-07-15T11:29:25.243192801Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:25.244204 env[1251]: time="2025-07-15T11:29:25.244191711Z" level=info msg="ImageUpdate event &ImageUpdate{Name:quay.io/tigera/operator:v1.38.3,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:25.245081 env[1251]: time="2025-07-15T11:29:25.245065261Z" level=info msg="ImageCreate event &ImageCreate{Name:quay.io/tigera/operator@sha256:dbf1bad0def7b5955dc8e4aeee96e23ead0bc5822f6872518e685cd0ed484121,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:25.245482 env[1251]: time="2025-07-15T11:29:25.245468618Z" level=info msg="PullImage \"quay.io/tigera/operator:v1.38.3\" returns image reference \"sha256:8bde16470b09d1963e19456806d73180c9778a6c2b3c1fda2335c67c1cd4ce93\"" Jul 15 11:29:25.261058 env[1251]: time="2025-07-15T11:29:25.261034618Z" level=info msg="CreateContainer within sandbox \"ee953945c3b30cffd21ce4f184545c9e3482100fc3c6a770f2292614cb1d1424\" for container &ContainerMetadata{Name:tigera-operator,Attempt:0,}" Jul 15 11:29:25.268874 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1998767368.mount: Deactivated successfully. Jul 15 11:29:25.272027 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1761917923.mount: Deactivated successfully. Jul 15 11:29:25.273363 env[1251]: time="2025-07-15T11:29:25.273278560Z" level=info msg="CreateContainer within sandbox \"ee953945c3b30cffd21ce4f184545c9e3482100fc3c6a770f2292614cb1d1424\" for &ContainerMetadata{Name:tigera-operator,Attempt:0,} returns container id \"267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5\"" Jul 15 11:29:25.274545 env[1251]: time="2025-07-15T11:29:25.274018536Z" level=info msg="StartContainer for \"267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5\"" Jul 15 11:29:25.288939 systemd[1]: Started cri-containerd-267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5.scope. Jul 15 11:29:25.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit: BPF prog-id=114 op=LOAD Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[2431]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=2253 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:25.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236376362623765633766656232333865326665386562313230346565 Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[2431]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=2253 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:25.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236376362623765633766656232333865326665386562313230346565 Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.301000 audit: BPF prog-id=115 op=LOAD Jul 15 11:29:25.301000 audit[2431]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00024fa80 items=0 ppid=2253 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:25.301000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236376362623765633766656232333865326665386562313230346565 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit: BPF prog-id=116 op=LOAD Jul 15 11:29:25.302000 audit[2431]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00024fac8 items=0 ppid=2253 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:25.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236376362623765633766656232333865326665386562313230346565 Jul 15 11:29:25.302000 audit: BPF prog-id=116 op=UNLOAD Jul 15 11:29:25.302000 audit: BPF prog-id=115 op=UNLOAD Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { perfmon } for pid=2431 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit[2431]: AVC avc: denied { bpf } for pid=2431 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:25.302000 audit: BPF prog-id=117 op=LOAD Jul 15 11:29:25.302000 audit[2431]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00024fed8 items=0 ppid=2253 pid=2431 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:25.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236376362623765633766656232333865326665386562313230346565 Jul 15 11:29:25.313369 env[1251]: time="2025-07-15T11:29:25.312388818Z" level=info msg="StartContainer for \"267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5\" returns successfully" Jul 15 11:29:25.770726 kubelet[2123]: I0715 11:29:25.770683 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="tigera-operator/tigera-operator-747864d56d-k4w6z" podStartSLOduration=1.8537631289999998 podStartE2EDuration="3.770671563s" podCreationTimestamp="2025-07-15 11:29:22 +0000 UTC" firstStartedPulling="2025-07-15 11:29:23.332314086 +0000 UTC m=+5.763863846" lastFinishedPulling="2025-07-15 11:29:25.249222521 +0000 UTC m=+7.680772280" observedRunningTime="2025-07-15 11:29:25.770561373 +0000 UTC m=+8.202111140" watchObservedRunningTime="2025-07-15 11:29:25.770671563 +0000 UTC m=+8.202221329" Jul 15 11:29:30.869241 sudo[1473]: pam_unix(sudo:session): session closed for user root Jul 15 11:29:30.873691 kernel: kauditd_printk_skb: 369 callbacks suppressed Jul 15 11:29:30.873770 kernel: audit: type=1106 audit(1752578970.868:932): pid=1473 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:29:30.868000 audit[1473]: USER_END pid=1473 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_limits,pam_env,pam_unix,pam_permit,pam_systemd acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:29:30.877012 kernel: audit: type=1104 audit(1752578970.869:933): pid=1473 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:29:30.869000 audit[1473]: CRED_DISP pid=1473 uid=500 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success' Jul 15 11:29:30.878210 sshd[1469]: pam_unix(sshd:session): session closed for user core Jul 15 11:29:30.879000 audit[1469]: USER_END pid=1469 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:29:30.884345 kernel: audit: type=1106 audit(1752578970.879:934): pid=1469 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:29:30.879000 audit[1469]: CRED_DISP pid=1469 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:29:30.895340 kernel: audit: type=1104 audit(1752578970.879:935): pid=1469 uid=0 auid=500 ses=9 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:29:31.040000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.108:22-147.75.109.163:42676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:31.041044 systemd[1]: sshd@6-139.178.70.108:22-147.75.109.163:42676.service: Deactivated successfully. Jul 15 11:29:31.044690 systemd[1]: session-9.scope: Deactivated successfully. Jul 15 11:29:31.044789 systemd[1]: session-9.scope: Consumed 3.040s CPU time. Jul 15 11:29:31.045095 systemd-logind[1241]: Session 9 logged out. Waiting for processes to exit. Jul 15 11:29:31.052831 kernel: audit: type=1131 audit(1752578971.040:936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@6-139.178.70.108:22-147.75.109.163:42676 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:29:31.045636 systemd-logind[1241]: Removed session 9. Jul 15 11:29:31.674000 audit[2513]: NETFILTER_CFG table=filter:89 family=2 entries=15 op=nft_register_rule pid=2513 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:31.677347 kernel: audit: type=1325 audit(1752578971.674:937): table=filter:89 family=2 entries=15 op=nft_register_rule pid=2513 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:31.674000 audit[2513]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffecf586800 a2=0 a3=7ffecf5867ec items=0 ppid=2231 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:31.674000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:31.688401 kernel: audit: type=1300 audit(1752578971.674:937): arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffecf586800 a2=0 a3=7ffecf5867ec items=0 ppid=2231 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:31.688483 kernel: audit: type=1327 audit(1752578971.674:937): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:31.689000 audit[2513]: NETFILTER_CFG table=nat:90 family=2 entries=12 op=nft_register_rule pid=2513 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:31.698026 kernel: audit: type=1325 audit(1752578971.689:938): table=nat:90 family=2 entries=12 op=nft_register_rule pid=2513 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:31.698104 kernel: audit: type=1300 audit(1752578971.689:938): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffecf586800 a2=0 a3=0 items=0 ppid=2231 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:31.689000 audit[2513]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffecf586800 a2=0 a3=0 items=0 ppid=2231 pid=2513 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:31.689000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:31.701000 audit[2515]: NETFILTER_CFG table=filter:91 family=2 entries=16 op=nft_register_rule pid=2515 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:31.701000 audit[2515]: SYSCALL arch=c000003e syscall=46 success=yes exit=5992 a0=3 a1=7ffcba5e8930 a2=0 a3=7ffcba5e891c items=0 ppid=2231 pid=2515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:31.701000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:31.706000 audit[2515]: NETFILTER_CFG table=nat:92 family=2 entries=12 op=nft_register_rule pid=2515 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:31.706000 audit[2515]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffcba5e8930 a2=0 a3=0 items=0 ppid=2231 pid=2515 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:31.706000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:35.000000 audit[2517]: NETFILTER_CFG table=filter:93 family=2 entries=17 op=nft_register_rule pid=2517 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:35.000000 audit[2517]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fffbcdb2070 a2=0 a3=7fffbcdb205c items=0 ppid=2231 pid=2517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.000000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:35.005000 audit[2517]: NETFILTER_CFG table=nat:94 family=2 entries=12 op=nft_register_rule pid=2517 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:35.005000 audit[2517]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7fffbcdb2070 a2=0 a3=0 items=0 ppid=2231 pid=2517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.005000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:35.014000 audit[2519]: NETFILTER_CFG table=filter:95 family=2 entries=19 op=nft_register_rule pid=2519 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:35.014000 audit[2519]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffea6a992a0 a2=0 a3=7ffea6a9928c items=0 ppid=2231 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.014000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:35.016000 audit[2519]: NETFILTER_CFG table=nat:96 family=2 entries=12 op=nft_register_rule pid=2519 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:35.016000 audit[2519]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffea6a992a0 a2=0 a3=0 items=0 ppid=2231 pid=2519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.016000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:35.153289 systemd[1]: Created slice kubepods-besteffort-pod21da88db_fb62_42a9_a826_1b0c52195ed3.slice. Jul 15 11:29:35.233040 kubelet[2123]: I0715 11:29:35.232998 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xht7x\" (UniqueName: \"kubernetes.io/projected/21da88db-fb62-42a9-a826-1b0c52195ed3-kube-api-access-xht7x\") pod \"calico-typha-74978c44c-bbmjc\" (UID: \"21da88db-fb62-42a9-a826-1b0c52195ed3\") " pod="calico-system/calico-typha-74978c44c-bbmjc" Jul 15 11:29:35.233040 kubelet[2123]: I0715 11:29:35.233044 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"typha-certs\" (UniqueName: \"kubernetes.io/secret/21da88db-fb62-42a9-a826-1b0c52195ed3-typha-certs\") pod \"calico-typha-74978c44c-bbmjc\" (UID: \"21da88db-fb62-42a9-a826-1b0c52195ed3\") " pod="calico-system/calico-typha-74978c44c-bbmjc" Jul 15 11:29:35.233380 kubelet[2123]: I0715 11:29:35.233058 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/21da88db-fb62-42a9-a826-1b0c52195ed3-tigera-ca-bundle\") pod \"calico-typha-74978c44c-bbmjc\" (UID: \"21da88db-fb62-42a9-a826-1b0c52195ed3\") " pod="calico-system/calico-typha-74978c44c-bbmjc" Jul 15 11:29:35.242834 systemd[1]: Created slice kubepods-besteffort-pod5447f176_631b_4289_9b46_41a4be183c8a.slice. Jul 15 11:29:35.334149 kubelet[2123]: I0715 11:29:35.334114 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-bin-dir\" (UniqueName: \"kubernetes.io/host-path/5447f176-631b-4289-9b46-41a4be183c8a-cni-bin-dir\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.334400 kubelet[2123]: I0715 11:29:35.334388 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"policysync\" (UniqueName: \"kubernetes.io/host-path/5447f176-631b-4289-9b46-41a4be183c8a-policysync\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.334495 kubelet[2123]: I0715 11:29:35.334487 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-net-dir\" (UniqueName: \"kubernetes.io/host-path/5447f176-631b-4289-9b46-41a4be183c8a-cni-net-dir\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.334795 kubelet[2123]: I0715 11:29:35.334786 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-run-calico\" (UniqueName: \"kubernetes.io/host-path/5447f176-631b-4289-9b46-41a4be183c8a-var-run-calico\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.334879 kubelet[2123]: I0715 11:29:35.334870 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"node-certs\" (UniqueName: \"kubernetes.io/secret/5447f176-631b-4289-9b46-41a4be183c8a-node-certs\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.335291 kubelet[2123]: I0715 11:29:35.335279 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"cni-log-dir\" (UniqueName: \"kubernetes.io/host-path/5447f176-631b-4289-9b46-41a4be183c8a-cni-log-dir\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.335785 kubelet[2123]: I0715 11:29:35.335769 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"flexvol-driver-host\" (UniqueName: \"kubernetes.io/host-path/5447f176-631b-4289-9b46-41a4be183c8a-flexvol-driver-host\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.335907 kubelet[2123]: I0715 11:29:35.335897 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"xtables-lock\" (UniqueName: \"kubernetes.io/host-path/5447f176-631b-4289-9b46-41a4be183c8a-xtables-lock\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.335990 kubelet[2123]: I0715 11:29:35.335981 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2ktj4\" (UniqueName: \"kubernetes.io/projected/5447f176-631b-4289-9b46-41a4be183c8a-kube-api-access-2ktj4\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.336214 kubelet[2123]: I0715 11:29:35.336203 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"lib-modules\" (UniqueName: \"kubernetes.io/host-path/5447f176-631b-4289-9b46-41a4be183c8a-lib-modules\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.336279 kubelet[2123]: I0715 11:29:35.336270 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/5447f176-631b-4289-9b46-41a4be183c8a-tigera-ca-bundle\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.336354 kubelet[2123]: I0715 11:29:35.336345 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"var-lib-calico\" (UniqueName: \"kubernetes.io/host-path/5447f176-631b-4289-9b46-41a4be183c8a-var-lib-calico\") pod \"calico-node-sgknc\" (UID: \"5447f176-631b-4289-9b46-41a4be183c8a\") " pod="calico-system/calico-node-sgknc" Jul 15 11:29:35.467224 env[1251]: time="2025-07-15T11:29:35.466954677Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-74978c44c-bbmjc,Uid:21da88db-fb62-42a9-a826-1b0c52195ed3,Namespace:calico-system,Attempt:0,}" Jul 15 11:29:35.479525 kubelet[2123]: E0715 11:29:35.479509 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.479627 kubelet[2123]: W0715 11:29:35.479616 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.488144 kubelet[2123]: E0715 11:29:35.488120 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.529240 kubelet[2123]: E0715 11:29:35.529216 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdpgt" podUID="b065a6c7-4fee-4858-b630-917bce34c00e" Jul 15 11:29:35.535687 env[1251]: time="2025-07-15T11:29:35.535525381Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:29:35.535687 env[1251]: time="2025-07-15T11:29:35.535556045Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:29:35.535687 env[1251]: time="2025-07-15T11:29:35.535564077Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:29:35.535687 env[1251]: time="2025-07-15T11:29:35.535650924Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7916020e396f05cda4c114c1ebc22f685d916a68b6db0622fa3dc28e195151f1 pid=2532 runtime=io.containerd.runc.v2 Jul 15 11:29:35.547677 systemd[1]: Started cri-containerd-7916020e396f05cda4c114c1ebc22f685d916a68b6db0622fa3dc28e195151f1.scope. Jul 15 11:29:35.548177 env[1251]: time="2025-07-15T11:29:35.548149455Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-sgknc,Uid:5447f176-631b-4289-9b46-41a4be183c8a,Namespace:calico-system,Attempt:0,}" Jul 15 11:29:35.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.567000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.567000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.567000 audit: BPF prog-id=118 op=LOAD Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit[2541]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=2532 pid=2541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739313630323065333936663035636461346331313463316562633232 Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit[2541]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=2532 pid=2541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739313630323065333936663035636461346331313463316562633232 Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.568000 audit: BPF prog-id=119 op=LOAD Jul 15 11:29:35.568000 audit[2541]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c48f0 items=0 ppid=2532 pid=2541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.568000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739313630323065333936663035636461346331313463316562633232 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit: BPF prog-id=120 op=LOAD Jul 15 11:29:35.569000 audit[2541]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c4938 items=0 ppid=2532 pid=2541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739313630323065333936663035636461346331313463316562633232 Jul 15 11:29:35.569000 audit: BPF prog-id=120 op=UNLOAD Jul 15 11:29:35.569000 audit: BPF prog-id=119 op=UNLOAD Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { perfmon } for pid=2541 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit[2541]: AVC avc: denied { bpf } for pid=2541 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.569000 audit: BPF prog-id=121 op=LOAD Jul 15 11:29:35.569000 audit[2541]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c4d48 items=0 ppid=2532 pid=2541 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.569000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3739313630323065333936663035636461346331313463316562633232 Jul 15 11:29:35.603704 env[1251]: time="2025-07-15T11:29:35.603638255Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-typha-74978c44c-bbmjc,Uid:21da88db-fb62-42a9-a826-1b0c52195ed3,Namespace:calico-system,Attempt:0,} returns sandbox id \"7916020e396f05cda4c114c1ebc22f685d916a68b6db0622fa3dc28e195151f1\"" Jul 15 11:29:35.608472 env[1251]: time="2025-07-15T11:29:35.608447270Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\"" Jul 15 11:29:35.610814 env[1251]: time="2025-07-15T11:29:35.610763844Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:29:35.610814 env[1251]: time="2025-07-15T11:29:35.610794846Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:29:35.610933 env[1251]: time="2025-07-15T11:29:35.610802154Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:29:35.611157 env[1251]: time="2025-07-15T11:29:35.611129728Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/9e2b5e7b5465932a50594719e33150375c2a87b55d49133318f5098a7f7fedae pid=2573 runtime=io.containerd.runc.v2 Jul 15 11:29:35.618227 systemd[1]: Started cri-containerd-9e2b5e7b5465932a50594719e33150375c2a87b55d49133318f5098a7f7fedae.scope. Jul 15 11:29:35.620724 kubelet[2123]: E0715 11:29:35.619674 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.620724 kubelet[2123]: W0715 11:29:35.619687 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.620724 kubelet[2123]: E0715 11:29:35.619701 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.620724 kubelet[2123]: E0715 11:29:35.619795 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.620724 kubelet[2123]: W0715 11:29:35.619800 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.620724 kubelet[2123]: E0715 11:29:35.619805 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.620724 kubelet[2123]: E0715 11:29:35.619890 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.620724 kubelet[2123]: W0715 11:29:35.619896 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.620724 kubelet[2123]: E0715 11:29:35.619901 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.620724 kubelet[2123]: E0715 11:29:35.620010 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.620982 kubelet[2123]: W0715 11:29:35.620014 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.620982 kubelet[2123]: E0715 11:29:35.620019 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.620982 kubelet[2123]: E0715 11:29:35.620110 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.620982 kubelet[2123]: W0715 11:29:35.620115 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.620982 kubelet[2123]: E0715 11:29:35.620121 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.620982 kubelet[2123]: E0715 11:29:35.620205 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.620982 kubelet[2123]: W0715 11:29:35.620210 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.620982 kubelet[2123]: E0715 11:29:35.620216 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.620982 kubelet[2123]: E0715 11:29:35.620320 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.620982 kubelet[2123]: W0715 11:29:35.620331 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.625629 kubelet[2123]: E0715 11:29:35.620338 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.625629 kubelet[2123]: E0715 11:29:35.620415 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.625629 kubelet[2123]: W0715 11:29:35.620420 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.625629 kubelet[2123]: E0715 11:29:35.620424 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.625629 kubelet[2123]: E0715 11:29:35.620668 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.625629 kubelet[2123]: W0715 11:29:35.620677 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.625629 kubelet[2123]: E0715 11:29:35.620682 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.625629 kubelet[2123]: E0715 11:29:35.622899 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.625629 kubelet[2123]: W0715 11:29:35.622909 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.625629 kubelet[2123]: E0715 11:29:35.622921 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.625807 kubelet[2123]: E0715 11:29:35.623153 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.625807 kubelet[2123]: W0715 11:29:35.623160 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.625807 kubelet[2123]: E0715 11:29:35.623168 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.625807 kubelet[2123]: E0715 11:29:35.623311 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.625807 kubelet[2123]: W0715 11:29:35.623316 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.625807 kubelet[2123]: E0715 11:29:35.623321 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.625807 kubelet[2123]: E0715 11:29:35.623439 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.625807 kubelet[2123]: W0715 11:29:35.623444 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.625807 kubelet[2123]: E0715 11:29:35.623449 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.625807 kubelet[2123]: E0715 11:29:35.623537 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.626003 kubelet[2123]: W0715 11:29:35.623543 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.626003 kubelet[2123]: E0715 11:29:35.623549 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.626003 kubelet[2123]: E0715 11:29:35.624052 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.626003 kubelet[2123]: W0715 11:29:35.624058 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.626003 kubelet[2123]: E0715 11:29:35.624064 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.626003 kubelet[2123]: E0715 11:29:35.624159 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.626003 kubelet[2123]: W0715 11:29:35.624164 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.626003 kubelet[2123]: E0715 11:29:35.624169 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.626003 kubelet[2123]: E0715 11:29:35.624271 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.626003 kubelet[2123]: W0715 11:29:35.624276 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.626169 kubelet[2123]: E0715 11:29:35.624280 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.626169 kubelet[2123]: E0715 11:29:35.624477 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.626169 kubelet[2123]: W0715 11:29:35.624482 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.626169 kubelet[2123]: E0715 11:29:35.624488 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.626169 kubelet[2123]: E0715 11:29:35.624579 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.626169 kubelet[2123]: W0715 11:29:35.624584 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.626169 kubelet[2123]: E0715 11:29:35.624589 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.626169 kubelet[2123]: E0715 11:29:35.624672 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.626169 kubelet[2123]: W0715 11:29:35.624677 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.626169 kubelet[2123]: E0715 11:29:35.624682 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.639218 kubelet[2123]: E0715 11:29:35.639111 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.639218 kubelet[2123]: W0715 11:29:35.639123 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.639218 kubelet[2123]: E0715 11:29:35.639135 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.639218 kubelet[2123]: I0715 11:29:35.639150 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"socket-dir\" (UniqueName: \"kubernetes.io/host-path/b065a6c7-4fee-4858-b630-917bce34c00e-socket-dir\") pod \"csi-node-driver-bdpgt\" (UID: \"b065a6c7-4fee-4858-b630-917bce34c00e\") " pod="calico-system/csi-node-driver-bdpgt" Jul 15 11:29:35.639491 kubelet[2123]: E0715 11:29:35.639408 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.639491 kubelet[2123]: W0715 11:29:35.639416 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.639491 kubelet[2123]: E0715 11:29:35.639422 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.639491 kubelet[2123]: I0715 11:29:35.639433 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"registration-dir\" (UniqueName: \"kubernetes.io/host-path/b065a6c7-4fee-4858-b630-917bce34c00e-registration-dir\") pod \"csi-node-driver-bdpgt\" (UID: \"b065a6c7-4fee-4858-b630-917bce34c00e\") " pod="calico-system/csi-node-driver-bdpgt" Jul 15 11:29:35.639692 kubelet[2123]: E0715 11:29:35.639612 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.639692 kubelet[2123]: W0715 11:29:35.639618 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.639692 kubelet[2123]: E0715 11:29:35.639624 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.639692 kubelet[2123]: I0715 11:29:35.639635 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"varrun\" (UniqueName: \"kubernetes.io/host-path/b065a6c7-4fee-4858-b630-917bce34c00e-varrun\") pod \"csi-node-driver-bdpgt\" (UID: \"b065a6c7-4fee-4858-b630-917bce34c00e\") " pod="calico-system/csi-node-driver-bdpgt" Jul 15 11:29:35.639898 kubelet[2123]: E0715 11:29:35.639819 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.639898 kubelet[2123]: W0715 11:29:35.639826 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.639898 kubelet[2123]: E0715 11:29:35.639832 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.639898 kubelet[2123]: I0715 11:29:35.639844 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mmpvc\" (UniqueName: \"kubernetes.io/projected/b065a6c7-4fee-4858-b630-917bce34c00e-kube-api-access-mmpvc\") pod \"csi-node-driver-bdpgt\" (UID: \"b065a6c7-4fee-4858-b630-917bce34c00e\") " pod="calico-system/csi-node-driver-bdpgt" Jul 15 11:29:35.640124 kubelet[2123]: E0715 11:29:35.640028 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.640124 kubelet[2123]: W0715 11:29:35.640034 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.640124 kubelet[2123]: E0715 11:29:35.640040 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.640124 kubelet[2123]: I0715 11:29:35.640050 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kubelet-dir\" (UniqueName: \"kubernetes.io/host-path/b065a6c7-4fee-4858-b630-917bce34c00e-kubelet-dir\") pod \"csi-node-driver-bdpgt\" (UID: \"b065a6c7-4fee-4858-b630-917bce34c00e\") " pod="calico-system/csi-node-driver-bdpgt" Jul 15 11:29:35.640304 kubelet[2123]: E0715 11:29:35.640241 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.640304 kubelet[2123]: W0715 11:29:35.640247 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.640304 kubelet[2123]: E0715 11:29:35.640253 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.640519 kubelet[2123]: E0715 11:29:35.640445 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.640519 kubelet[2123]: W0715 11:29:35.640451 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.640519 kubelet[2123]: E0715 11:29:35.640456 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.640696 kubelet[2123]: E0715 11:29:35.640633 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.640696 kubelet[2123]: W0715 11:29:35.640638 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.640696 kubelet[2123]: E0715 11:29:35.640643 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.640853 kubelet[2123]: E0715 11:29:35.640794 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.640853 kubelet[2123]: W0715 11:29:35.640799 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.640853 kubelet[2123]: E0715 11:29:35.640804 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.641343 kubelet[2123]: E0715 11:29:35.640943 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.641343 kubelet[2123]: W0715 11:29:35.640948 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.641343 kubelet[2123]: E0715 11:29:35.640954 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.641343 kubelet[2123]: E0715 11:29:35.641042 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.641343 kubelet[2123]: W0715 11:29:35.641047 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.641343 kubelet[2123]: E0715 11:29:35.641052 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.641343 kubelet[2123]: E0715 11:29:35.641269 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.641343 kubelet[2123]: W0715 11:29:35.641273 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.641343 kubelet[2123]: E0715 11:29:35.641279 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.641982 kubelet[2123]: E0715 11:29:35.641911 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.641982 kubelet[2123]: W0715 11:29:35.641918 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.641982 kubelet[2123]: E0715 11:29:35.641924 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.642147 kubelet[2123]: E0715 11:29:35.642082 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.642147 kubelet[2123]: W0715 11:29:35.642087 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.642147 kubelet[2123]: E0715 11:29:35.642094 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.642277 kubelet[2123]: E0715 11:29:35.642247 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.642277 kubelet[2123]: W0715 11:29:35.642262 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.642277 kubelet[2123]: E0715 11:29:35.642267 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.643000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.643000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.643000 audit: BPF prog-id=122 op=LOAD Jul 15 11:29:35.643000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.643000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=2573 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.643000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965326235653762353436353933326135303539343731396533333135 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=2573 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965326235653762353436353933326135303539343731396533333135 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit: BPF prog-id=123 op=LOAD Jul 15 11:29:35.644000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0003b09d0 items=0 ppid=2573 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965326235653762353436353933326135303539343731396533333135 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.644000 audit: BPF prog-id=124 op=LOAD Jul 15 11:29:35.644000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0003b0a18 items=0 ppid=2573 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.644000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965326235653762353436353933326135303539343731396533333135 Jul 15 11:29:35.645000 audit: BPF prog-id=124 op=UNLOAD Jul 15 11:29:35.645000 audit: BPF prog-id=123 op=UNLOAD Jul 15 11:29:35.645000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.645000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.645000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.645000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.645000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.645000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.645000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.645000 audit[2580]: AVC avc: denied { perfmon } for pid=2580 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.645000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.645000 audit[2580]: AVC avc: denied { bpf } for pid=2580 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:35.645000 audit: BPF prog-id=125 op=LOAD Jul 15 11:29:35.645000 audit[2580]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003b0e28 items=0 ppid=2573 pid=2580 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:35.645000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3965326235653762353436353933326135303539343731396533333135 Jul 15 11:29:35.655188 env[1251]: time="2025-07-15T11:29:35.655136503Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-node-sgknc,Uid:5447f176-631b-4289-9b46-41a4be183c8a,Namespace:calico-system,Attempt:0,} returns sandbox id \"9e2b5e7b5465932a50594719e33150375c2a87b55d49133318f5098a7f7fedae\"" Jul 15 11:29:35.740767 kubelet[2123]: E0715 11:29:35.740743 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.740906 kubelet[2123]: W0715 11:29:35.740891 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.740963 kubelet[2123]: E0715 11:29:35.740953 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.741138 kubelet[2123]: E0715 11:29:35.741130 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.741208 kubelet[2123]: W0715 11:29:35.741199 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.741256 kubelet[2123]: E0715 11:29:35.741248 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.741431 kubelet[2123]: E0715 11:29:35.741423 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.741476 kubelet[2123]: W0715 11:29:35.741467 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.741523 kubelet[2123]: E0715 11:29:35.741515 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.741729 kubelet[2123]: E0715 11:29:35.741722 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.741781 kubelet[2123]: W0715 11:29:35.741772 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.741831 kubelet[2123]: E0715 11:29:35.741822 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.741994 kubelet[2123]: E0715 11:29:35.741988 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.742039 kubelet[2123]: W0715 11:29:35.742031 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.742088 kubelet[2123]: E0715 11:29:35.742079 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.742452 kubelet[2123]: E0715 11:29:35.742438 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.742515 kubelet[2123]: W0715 11:29:35.742504 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.742568 kubelet[2123]: E0715 11:29:35.742560 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.742732 kubelet[2123]: E0715 11:29:35.742725 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.742793 kubelet[2123]: W0715 11:29:35.742784 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.742844 kubelet[2123]: E0715 11:29:35.742836 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.742981 kubelet[2123]: E0715 11:29:35.742975 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.743030 kubelet[2123]: W0715 11:29:35.743022 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.743081 kubelet[2123]: E0715 11:29:35.743074 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.743222 kubelet[2123]: E0715 11:29:35.743214 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.743279 kubelet[2123]: W0715 11:29:35.743270 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.743336 kubelet[2123]: E0715 11:29:35.743318 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.743483 kubelet[2123]: E0715 11:29:35.743476 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.743535 kubelet[2123]: W0715 11:29:35.743527 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.743596 kubelet[2123]: E0715 11:29:35.743586 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.743737 kubelet[2123]: E0715 11:29:35.743731 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.743788 kubelet[2123]: W0715 11:29:35.743779 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.743837 kubelet[2123]: E0715 11:29:35.743827 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.743982 kubelet[2123]: E0715 11:29:35.743975 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.744036 kubelet[2123]: W0715 11:29:35.744026 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.744108 kubelet[2123]: E0715 11:29:35.744099 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.744240 kubelet[2123]: E0715 11:29:35.744234 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.744299 kubelet[2123]: W0715 11:29:35.744289 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.744367 kubelet[2123]: E0715 11:29:35.744358 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.744524 kubelet[2123]: E0715 11:29:35.744518 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.744579 kubelet[2123]: W0715 11:29:35.744569 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.744631 kubelet[2123]: E0715 11:29:35.744623 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.744781 kubelet[2123]: E0715 11:29:35.744773 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.744838 kubelet[2123]: W0715 11:29:35.744830 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.744893 kubelet[2123]: E0715 11:29:35.744883 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.745097 kubelet[2123]: E0715 11:29:35.745090 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.745146 kubelet[2123]: W0715 11:29:35.745138 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.745210 kubelet[2123]: E0715 11:29:35.745195 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.745406 kubelet[2123]: E0715 11:29:35.745398 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.745477 kubelet[2123]: W0715 11:29:35.745466 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.745562 kubelet[2123]: E0715 11:29:35.745554 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.753562 kubelet[2123]: E0715 11:29:35.753544 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.753664 kubelet[2123]: W0715 11:29:35.753652 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.753737 kubelet[2123]: E0715 11:29:35.753727 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.754502 kubelet[2123]: E0715 11:29:35.754488 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.754565 kubelet[2123]: W0715 11:29:35.754556 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.754614 kubelet[2123]: E0715 11:29:35.754606 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.754759 kubelet[2123]: E0715 11:29:35.754752 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.754811 kubelet[2123]: W0715 11:29:35.754803 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.754855 kubelet[2123]: E0715 11:29:35.754848 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.754988 kubelet[2123]: E0715 11:29:35.754981 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.755042 kubelet[2123]: W0715 11:29:35.755033 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.755099 kubelet[2123]: E0715 11:29:35.755090 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.755275 kubelet[2123]: E0715 11:29:35.755269 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.755342 kubelet[2123]: W0715 11:29:35.755322 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.755395 kubelet[2123]: E0715 11:29:35.755386 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.755549 kubelet[2123]: E0715 11:29:35.755542 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.755604 kubelet[2123]: W0715 11:29:35.755595 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.755647 kubelet[2123]: E0715 11:29:35.755639 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.755909 kubelet[2123]: E0715 11:29:35.755902 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.755962 kubelet[2123]: W0715 11:29:35.755952 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.756011 kubelet[2123]: E0715 11:29:35.756001 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.756158 kubelet[2123]: E0715 11:29:35.756152 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.756207 kubelet[2123]: W0715 11:29:35.756199 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.756251 kubelet[2123]: E0715 11:29:35.756243 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:35.762845 kubelet[2123]: E0715 11:29:35.762833 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:35.762951 kubelet[2123]: W0715 11:29:35.762941 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:35.763001 kubelet[2123]: E0715 11:29:35.762993 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:36.028000 audit[2669]: NETFILTER_CFG table=filter:97 family=2 entries=21 op=nft_register_rule pid=2669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:36.033731 kernel: kauditd_printk_skb: 133 callbacks suppressed Jul 15 11:29:36.033786 kernel: audit: type=1325 audit(1752578976.028:981): table=filter:97 family=2 entries=21 op=nft_register_rule pid=2669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:36.028000 audit[2669]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffffeee2d70 a2=0 a3=7ffffeee2d5c items=0 ppid=2231 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:36.039466 kernel: audit: type=1300 audit(1752578976.028:981): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffffeee2d70 a2=0 a3=7ffffeee2d5c items=0 ppid=2231 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:36.039504 kernel: audit: type=1327 audit(1752578976.028:981): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:36.028000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:36.035000 audit[2669]: NETFILTER_CFG table=nat:98 family=2 entries=12 op=nft_register_rule pid=2669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:36.043096 kernel: audit: type=1325 audit(1752578976.035:982): table=nat:98 family=2 entries=12 op=nft_register_rule pid=2669 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:36.043122 kernel: audit: type=1300 audit(1752578976.035:982): arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffffeee2d70 a2=0 a3=0 items=0 ppid=2231 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:36.035000 audit[2669]: SYSCALL arch=c000003e syscall=46 success=yes exit=2700 a0=3 a1=7ffffeee2d70 a2=0 a3=0 items=0 ppid=2231 pid=2669 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:36.035000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:36.052337 kernel: audit: type=1327 audit(1752578976.035:982): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:36.732177 kubelet[2123]: E0715 11:29:36.732150 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdpgt" podUID="b065a6c7-4fee-4858-b630-917bce34c00e" Jul 15 11:29:37.221077 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2828812197.mount: Deactivated successfully. Jul 15 11:29:38.104139 env[1251]: time="2025-07-15T11:29:38.104095498Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:38.117745 env[1251]: time="2025-07-15T11:29:38.117716770Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:38.123687 env[1251]: time="2025-07-15T11:29:38.123667517Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/typha:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:38.125820 env[1251]: time="2025-07-15T11:29:38.125797922Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/typha@sha256:da29d745efe5eb7d25f765d3aa439f3fe60710a458efe39c285e58b02bd961af,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:38.126353 env[1251]: time="2025-07-15T11:29:38.126333375Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/typha:v3.30.2\" returns image reference \"sha256:b3baa600c7ff9cd50dc12f2529ef263aaa346dbeca13c77c6553d661fd216b54\"" Jul 15 11:29:38.127649 env[1251]: time="2025-07-15T11:29:38.127627425Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\"" Jul 15 11:29:38.159872 env[1251]: time="2025-07-15T11:29:38.159847758Z" level=info msg="CreateContainer within sandbox \"7916020e396f05cda4c114c1ebc22f685d916a68b6db0622fa3dc28e195151f1\" for container &ContainerMetadata{Name:calico-typha,Attempt:0,}" Jul 15 11:29:38.182223 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2378515602.mount: Deactivated successfully. Jul 15 11:29:38.195394 env[1251]: time="2025-07-15T11:29:38.195356298Z" level=info msg="CreateContainer within sandbox \"7916020e396f05cda4c114c1ebc22f685d916a68b6db0622fa3dc28e195151f1\" for &ContainerMetadata{Name:calico-typha,Attempt:0,} returns container id \"0caf2638d907ebee3e46d8409f140640cf5eb4dcdb30bf5d43b5914a801d4eac\"" Jul 15 11:29:38.196162 env[1251]: time="2025-07-15T11:29:38.196139849Z" level=info msg="StartContainer for \"0caf2638d907ebee3e46d8409f140640cf5eb4dcdb30bf5d43b5914a801d4eac\"" Jul 15 11:29:38.214351 systemd[1]: Started cri-containerd-0caf2638d907ebee3e46d8409f140640cf5eb4dcdb30bf5d43b5914a801d4eac.scope. Jul 15 11:29:38.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.358381 kernel: audit: type=1400 audit(1752578978.354:983): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.365961 kernel: audit: type=1400 audit(1752578978.354:984): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.366001 kernel: audit: type=1400 audit(1752578978.354:985): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.379537 kernel: audit: type=1400 audit(1752578978.354:986): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.354000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.354000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.354000 audit: BPF prog-id=126 op=LOAD Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit[2679]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00014dc48 a2=10 a3=1c items=0 ppid=2532 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:38.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063616632363338643930376562656533653436643834303966313430 Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit[2679]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00014d6b0 a2=3c a3=8 items=0 ppid=2532 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:38.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063616632363338643930376562656533653436643834303966313430 Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.355000 audit: BPF prog-id=127 op=LOAD Jul 15 11:29:38.355000 audit[2679]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014d9d8 a2=78 a3=c00030cd50 items=0 ppid=2532 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:38.355000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063616632363338643930376562656533653436643834303966313430 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit: BPF prog-id=128 op=LOAD Jul 15 11:29:38.357000 audit[2679]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00014d770 a2=78 a3=c00030cd98 items=0 ppid=2532 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:38.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063616632363338643930376562656533653436643834303966313430 Jul 15 11:29:38.357000 audit: BPF prog-id=128 op=UNLOAD Jul 15 11:29:38.357000 audit: BPF prog-id=127 op=UNLOAD Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { perfmon } for pid=2679 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit[2679]: AVC avc: denied { bpf } for pid=2679 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:38.357000 audit: BPF prog-id=129 op=LOAD Jul 15 11:29:38.357000 audit[2679]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00014dc30 a2=78 a3=c00030d1a8 items=0 ppid=2532 pid=2679 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:38.357000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3063616632363338643930376562656533653436643834303966313430 Jul 15 11:29:38.438642 env[1251]: time="2025-07-15T11:29:38.438608242Z" level=info msg="StartContainer for \"0caf2638d907ebee3e46d8409f140640cf5eb4dcdb30bf5d43b5914a801d4eac\" returns successfully" Jul 15 11:29:38.732228 kubelet[2123]: E0715 11:29:38.731970 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdpgt" podUID="b065a6c7-4fee-4858-b630-917bce34c00e" Jul 15 11:29:38.820769 kubelet[2123]: I0715 11:29:38.813262 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-typha-74978c44c-bbmjc" podStartSLOduration=1.294210275 podStartE2EDuration="3.813252137s" podCreationTimestamp="2025-07-15 11:29:35 +0000 UTC" firstStartedPulling="2025-07-15 11:29:35.608130901 +0000 UTC m=+18.039680660" lastFinishedPulling="2025-07-15 11:29:38.127172755 +0000 UTC m=+20.558722522" observedRunningTime="2025-07-15 11:29:38.813098339 +0000 UTC m=+21.244648110" watchObservedRunningTime="2025-07-15 11:29:38.813252137 +0000 UTC m=+21.244801903" Jul 15 11:29:38.842298 kubelet[2123]: E0715 11:29:38.842275 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.844770 kubelet[2123]: W0715 11:29:38.842461 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.844770 kubelet[2123]: E0715 11:29:38.842482 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.844770 kubelet[2123]: E0715 11:29:38.842600 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.844770 kubelet[2123]: W0715 11:29:38.842606 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.844770 kubelet[2123]: E0715 11:29:38.842611 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.844770 kubelet[2123]: E0715 11:29:38.842718 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.844770 kubelet[2123]: W0715 11:29:38.842723 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.844770 kubelet[2123]: E0715 11:29:38.842729 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.844770 kubelet[2123]: E0715 11:29:38.842856 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.844770 kubelet[2123]: W0715 11:29:38.842861 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.848423 kubelet[2123]: E0715 11:29:38.842866 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.848423 kubelet[2123]: E0715 11:29:38.842975 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.848423 kubelet[2123]: W0715 11:29:38.842981 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.848423 kubelet[2123]: E0715 11:29:38.842986 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.848423 kubelet[2123]: E0715 11:29:38.843073 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.848423 kubelet[2123]: W0715 11:29:38.843077 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.848423 kubelet[2123]: E0715 11:29:38.843082 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.848423 kubelet[2123]: E0715 11:29:38.843165 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.848423 kubelet[2123]: W0715 11:29:38.843171 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.848423 kubelet[2123]: E0715 11:29:38.843175 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.850798 kubelet[2123]: E0715 11:29:38.843263 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.850798 kubelet[2123]: W0715 11:29:38.843268 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.850798 kubelet[2123]: E0715 11:29:38.843272 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.850798 kubelet[2123]: E0715 11:29:38.843392 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.850798 kubelet[2123]: W0715 11:29:38.843398 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.850798 kubelet[2123]: E0715 11:29:38.843404 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.850798 kubelet[2123]: E0715 11:29:38.843489 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.850798 kubelet[2123]: W0715 11:29:38.843493 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.850798 kubelet[2123]: E0715 11:29:38.843498 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.850798 kubelet[2123]: E0715 11:29:38.843584 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.851064 kubelet[2123]: W0715 11:29:38.843590 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.851064 kubelet[2123]: E0715 11:29:38.843594 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.851064 kubelet[2123]: E0715 11:29:38.843677 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.851064 kubelet[2123]: W0715 11:29:38.843681 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.851064 kubelet[2123]: E0715 11:29:38.843687 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.851064 kubelet[2123]: E0715 11:29:38.843787 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.851064 kubelet[2123]: W0715 11:29:38.843793 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.851064 kubelet[2123]: E0715 11:29:38.843801 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.851064 kubelet[2123]: E0715 11:29:38.843905 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.851064 kubelet[2123]: W0715 11:29:38.843910 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.851394 kubelet[2123]: E0715 11:29:38.843914 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.851394 kubelet[2123]: E0715 11:29:38.843999 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.851394 kubelet[2123]: W0715 11:29:38.844004 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.851394 kubelet[2123]: E0715 11:29:38.844011 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.863439 kubelet[2123]: E0715 11:29:38.863420 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.863572 kubelet[2123]: W0715 11:29:38.863558 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.863645 kubelet[2123]: E0715 11:29:38.863633 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.863842 kubelet[2123]: E0715 11:29:38.863833 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.863909 kubelet[2123]: W0715 11:29:38.863900 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.863971 kubelet[2123]: E0715 11:29:38.863962 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.864174 kubelet[2123]: E0715 11:29:38.864160 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.864223 kubelet[2123]: W0715 11:29:38.864178 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.864223 kubelet[2123]: E0715 11:29:38.864189 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.864700 kubelet[2123]: E0715 11:29:38.864688 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.864700 kubelet[2123]: W0715 11:29:38.864698 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.864785 kubelet[2123]: E0715 11:29:38.864706 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.864896 kubelet[2123]: E0715 11:29:38.864884 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.864896 kubelet[2123]: W0715 11:29:38.864893 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.864977 kubelet[2123]: E0715 11:29:38.864900 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.865095 kubelet[2123]: E0715 11:29:38.865084 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.865095 kubelet[2123]: W0715 11:29:38.865091 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.865095 kubelet[2123]: E0715 11:29:38.865096 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.865532 kubelet[2123]: E0715 11:29:38.865520 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.865532 kubelet[2123]: W0715 11:29:38.865528 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.865619 kubelet[2123]: E0715 11:29:38.865534 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.865755 kubelet[2123]: E0715 11:29:38.865746 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.865755 kubelet[2123]: W0715 11:29:38.865752 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.865838 kubelet[2123]: E0715 11:29:38.865758 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.865955 kubelet[2123]: E0715 11:29:38.865944 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.865955 kubelet[2123]: W0715 11:29:38.865953 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.866099 kubelet[2123]: E0715 11:29:38.865961 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.866207 kubelet[2123]: E0715 11:29:38.866197 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.866207 kubelet[2123]: W0715 11:29:38.866203 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.866289 kubelet[2123]: E0715 11:29:38.866209 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.866406 kubelet[2123]: E0715 11:29:38.866395 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.866406 kubelet[2123]: W0715 11:29:38.866402 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.866476 kubelet[2123]: E0715 11:29:38.866407 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.866586 kubelet[2123]: E0715 11:29:38.866575 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.866586 kubelet[2123]: W0715 11:29:38.866584 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.866667 kubelet[2123]: E0715 11:29:38.866591 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.866774 kubelet[2123]: E0715 11:29:38.866763 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.866774 kubelet[2123]: W0715 11:29:38.866772 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.866841 kubelet[2123]: E0715 11:29:38.866780 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.867080 kubelet[2123]: E0715 11:29:38.867071 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.867148 kubelet[2123]: W0715 11:29:38.867138 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.867211 kubelet[2123]: E0715 11:29:38.867199 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.867407 kubelet[2123]: E0715 11:29:38.867399 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.867465 kubelet[2123]: W0715 11:29:38.867457 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.867520 kubelet[2123]: E0715 11:29:38.867510 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.868124 kubelet[2123]: E0715 11:29:38.868116 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.868183 kubelet[2123]: W0715 11:29:38.868172 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.868252 kubelet[2123]: E0715 11:29:38.868242 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.868549 kubelet[2123]: E0715 11:29:38.868535 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.868549 kubelet[2123]: W0715 11:29:38.868545 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.868616 kubelet[2123]: E0715 11:29:38.868552 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:38.868956 kubelet[2123]: E0715 11:29:38.868940 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:38.868956 kubelet[2123]: W0715 11:29:38.868953 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:38.869011 kubelet[2123]: E0715 11:29:38.868964 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.783983 kubelet[2123]: I0715 11:29:39.783957 2123 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:29:39.850119 kubelet[2123]: E0715 11:29:39.850091 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.850119 kubelet[2123]: W0715 11:29:39.850106 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.850119 kubelet[2123]: E0715 11:29:39.850119 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.850260 kubelet[2123]: E0715 11:29:39.850208 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.850260 kubelet[2123]: W0715 11:29:39.850212 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.850260 kubelet[2123]: E0715 11:29:39.850217 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.850322 kubelet[2123]: E0715 11:29:39.850289 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.850322 kubelet[2123]: W0715 11:29:39.850293 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.850322 kubelet[2123]: E0715 11:29:39.850298 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.850417 kubelet[2123]: E0715 11:29:39.850412 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.850417 kubelet[2123]: W0715 11:29:39.850417 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.850477 kubelet[2123]: E0715 11:29:39.850422 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.850510 kubelet[2123]: E0715 11:29:39.850501 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.850510 kubelet[2123]: W0715 11:29:39.850506 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.850550 kubelet[2123]: E0715 11:29:39.850510 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.850588 kubelet[2123]: E0715 11:29:39.850576 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.850588 kubelet[2123]: W0715 11:29:39.850584 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.850650 kubelet[2123]: E0715 11:29:39.850589 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.850672 kubelet[2123]: E0715 11:29:39.850664 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.850672 kubelet[2123]: W0715 11:29:39.850669 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.850710 kubelet[2123]: E0715 11:29:39.850673 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.850754 kubelet[2123]: E0715 11:29:39.850745 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.850754 kubelet[2123]: W0715 11:29:39.850752 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.850810 kubelet[2123]: E0715 11:29:39.850756 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.850840 kubelet[2123]: E0715 11:29:39.850828 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.850840 kubelet[2123]: W0715 11:29:39.850833 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.850840 kubelet[2123]: E0715 11:29:39.850837 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.850914 kubelet[2123]: E0715 11:29:39.850901 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.850914 kubelet[2123]: W0715 11:29:39.850909 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.850914 kubelet[2123]: E0715 11:29:39.850914 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.850994 kubelet[2123]: E0715 11:29:39.850979 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.850994 kubelet[2123]: W0715 11:29:39.850983 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.850994 kubelet[2123]: E0715 11:29:39.850987 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.851066 kubelet[2123]: E0715 11:29:39.851054 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.851066 kubelet[2123]: W0715 11:29:39.851062 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.851128 kubelet[2123]: E0715 11:29:39.851067 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.851152 kubelet[2123]: E0715 11:29:39.851138 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.851152 kubelet[2123]: W0715 11:29:39.851142 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.851152 kubelet[2123]: E0715 11:29:39.851146 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.851225 kubelet[2123]: E0715 11:29:39.851215 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.851225 kubelet[2123]: W0715 11:29:39.851222 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.851282 kubelet[2123]: E0715 11:29:39.851228 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.851312 kubelet[2123]: E0715 11:29:39.851304 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.851312 kubelet[2123]: W0715 11:29:39.851308 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.851312 kubelet[2123]: E0715 11:29:39.851312 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.873338 kubelet[2123]: E0715 11:29:39.872568 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.873338 kubelet[2123]: W0715 11:29:39.872580 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.873338 kubelet[2123]: E0715 11:29:39.872591 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.873338 kubelet[2123]: E0715 11:29:39.872698 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.873338 kubelet[2123]: W0715 11:29:39.872708 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.873338 kubelet[2123]: E0715 11:29:39.872714 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.873338 kubelet[2123]: E0715 11:29:39.872804 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.873338 kubelet[2123]: W0715 11:29:39.872809 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.873338 kubelet[2123]: E0715 11:29:39.872819 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.873338 kubelet[2123]: E0715 11:29:39.872925 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.873577 kubelet[2123]: W0715 11:29:39.872930 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.873577 kubelet[2123]: E0715 11:29:39.872934 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.873577 kubelet[2123]: E0715 11:29:39.873022 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.873577 kubelet[2123]: W0715 11:29:39.873027 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.873577 kubelet[2123]: E0715 11:29:39.873031 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.873577 kubelet[2123]: E0715 11:29:39.873116 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.873577 kubelet[2123]: W0715 11:29:39.873120 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.873577 kubelet[2123]: E0715 11:29:39.873125 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.873577 kubelet[2123]: E0715 11:29:39.873225 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.873577 kubelet[2123]: W0715 11:29:39.873232 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.873861 kubelet[2123]: E0715 11:29:39.873237 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.873861 kubelet[2123]: E0715 11:29:39.873410 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.873861 kubelet[2123]: W0715 11:29:39.873417 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.873861 kubelet[2123]: E0715 11:29:39.873423 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.873861 kubelet[2123]: E0715 11:29:39.873499 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.873861 kubelet[2123]: W0715 11:29:39.873504 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.873861 kubelet[2123]: E0715 11:29:39.873509 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.873861 kubelet[2123]: E0715 11:29:39.873576 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.873861 kubelet[2123]: W0715 11:29:39.873596 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.873861 kubelet[2123]: E0715 11:29:39.873603 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.874033 kubelet[2123]: E0715 11:29:39.873693 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.874033 kubelet[2123]: W0715 11:29:39.873697 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.874033 kubelet[2123]: E0715 11:29:39.873702 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.874033 kubelet[2123]: E0715 11:29:39.873948 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.874033 kubelet[2123]: W0715 11:29:39.873953 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.874033 kubelet[2123]: E0715 11:29:39.873959 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.874159 kubelet[2123]: E0715 11:29:39.874041 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.874159 kubelet[2123]: W0715 11:29:39.874046 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.874159 kubelet[2123]: E0715 11:29:39.874051 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.874159 kubelet[2123]: E0715 11:29:39.874125 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.874159 kubelet[2123]: W0715 11:29:39.874130 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.874159 kubelet[2123]: E0715 11:29:39.874135 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.874266 kubelet[2123]: E0715 11:29:39.874201 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.874266 kubelet[2123]: W0715 11:29:39.874206 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.874266 kubelet[2123]: E0715 11:29:39.874210 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.874334 kubelet[2123]: E0715 11:29:39.874287 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.874334 kubelet[2123]: W0715 11:29:39.874291 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.874334 kubelet[2123]: E0715 11:29:39.874296 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.885911 kubelet[2123]: E0715 11:29:39.874509 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.885911 kubelet[2123]: W0715 11:29:39.874514 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.885911 kubelet[2123]: E0715 11:29:39.874519 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:39.885911 kubelet[2123]: E0715 11:29:39.874622 2123 driver-call.go:262] Failed to unmarshal output for command: init, output: "", error: unexpected end of JSON input Jul 15 11:29:39.885911 kubelet[2123]: W0715 11:29:39.874626 2123 driver-call.go:149] FlexVolume: driver call failed: executable: /opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds/uds, args: [init], error: executable file not found in $PATH, output: "" Jul 15 11:29:39.885911 kubelet[2123]: E0715 11:29:39.874631 2123 plugins.go:703] "Error dynamically probing plugins" err="error creating Flexvolume plugin from directory nodeagent~uds, skipping. Error: unexpected end of JSON input" Jul 15 11:29:40.038396 env[1251]: time="2025-07-15T11:29:40.036549753Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:40.086239 env[1251]: time="2025-07-15T11:29:40.086207249Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:40.105203 env[1251]: time="2025-07-15T11:29:40.105174290Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:40.114865 env[1251]: time="2025-07-15T11:29:40.114818557Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/pod2daemon-flexvol@sha256:972be127eaecd7d1a2d5393b8d14f1ae8f88550bee83e0519e9590c7e15eb41b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:40.115046 env[1251]: time="2025-07-15T11:29:40.115026477Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/pod2daemon-flexvol:v3.30.2\" returns image reference \"sha256:639615519fa6f7bc4b4756066ba9780068fd291eacc36c120f6c555e62f2b00e\"" Jul 15 11:29:40.130284 env[1251]: time="2025-07-15T11:29:40.130260048Z" level=info msg="CreateContainer within sandbox \"9e2b5e7b5465932a50594719e33150375c2a87b55d49133318f5098a7f7fedae\" for container &ContainerMetadata{Name:flexvol-driver,Attempt:0,}" Jul 15 11:29:40.191364 env[1251]: time="2025-07-15T11:29:40.191320300Z" level=info msg="CreateContainer within sandbox \"9e2b5e7b5465932a50594719e33150375c2a87b55d49133318f5098a7f7fedae\" for &ContainerMetadata{Name:flexvol-driver,Attempt:0,} returns container id \"1ecc57ea355676878c8158ddd9ed1c74d42ca0166abaeeca08c2ff7fe5bf9571\"" Jul 15 11:29:40.191925 env[1251]: time="2025-07-15T11:29:40.191906317Z" level=info msg="StartContainer for \"1ecc57ea355676878c8158ddd9ed1c74d42ca0166abaeeca08c2ff7fe5bf9571\"" Jul 15 11:29:40.207399 systemd[1]: Started cri-containerd-1ecc57ea355676878c8158ddd9ed1c74d42ca0166abaeeca08c2ff7fe5bf9571.scope. Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001456b0 a2=3c a3=7f550016f718 items=0 ppid=2573 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:40.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165636335376561333535363736383738633831353864646439656431 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit: BPF prog-id=130 op=LOAD Jul 15 11:29:40.223000 audit[2782]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001459d8 a2=78 a3=c000218228 items=0 ppid=2573 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:40.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165636335376561333535363736383738633831353864646439656431 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit: BPF prog-id=131 op=LOAD Jul 15 11:29:40.223000 audit[2782]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000145770 a2=78 a3=c000218278 items=0 ppid=2573 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:40.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165636335376561333535363736383738633831353864646439656431 Jul 15 11:29:40.223000 audit: BPF prog-id=131 op=UNLOAD Jul 15 11:29:40.223000 audit: BPF prog-id=130 op=UNLOAD Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { perfmon } for pid=2782 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit[2782]: AVC avc: denied { bpf } for pid=2782 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:40.223000 audit: BPF prog-id=132 op=LOAD Jul 15 11:29:40.223000 audit[2782]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000145c30 a2=78 a3=c000218308 items=0 ppid=2573 pid=2782 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:40.223000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3165636335376561333535363736383738633831353864646439656431 Jul 15 11:29:40.234624 env[1251]: time="2025-07-15T11:29:40.234596981Z" level=info msg="StartContainer for \"1ecc57ea355676878c8158ddd9ed1c74d42ca0166abaeeca08c2ff7fe5bf9571\" returns successfully" Jul 15 11:29:40.246259 systemd[1]: cri-containerd-1ecc57ea355676878c8158ddd9ed1c74d42ca0166abaeeca08c2ff7fe5bf9571.scope: Deactivated successfully. Jul 15 11:29:40.250000 audit: BPF prog-id=132 op=UNLOAD Jul 15 11:29:40.262819 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-1ecc57ea355676878c8158ddd9ed1c74d42ca0166abaeeca08c2ff7fe5bf9571-rootfs.mount: Deactivated successfully. Jul 15 11:29:40.292423 env[1251]: time="2025-07-15T11:29:40.292322739Z" level=info msg="shim disconnected" id=1ecc57ea355676878c8158ddd9ed1c74d42ca0166abaeeca08c2ff7fe5bf9571 Jul 15 11:29:40.292781 env[1251]: time="2025-07-15T11:29:40.292730759Z" level=warning msg="cleaning up after shim disconnected" id=1ecc57ea355676878c8158ddd9ed1c74d42ca0166abaeeca08c2ff7fe5bf9571 namespace=k8s.io Jul 15 11:29:40.293001 env[1251]: time="2025-07-15T11:29:40.292982396Z" level=info msg="cleaning up dead shim" Jul 15 11:29:40.299481 env[1251]: time="2025-07-15T11:29:40.299435957Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:29:40Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2822 runtime=io.containerd.runc.v2\n" Jul 15 11:29:40.732549 kubelet[2123]: E0715 11:29:40.732462 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdpgt" podUID="b065a6c7-4fee-4858-b630-917bce34c00e" Jul 15 11:29:40.786504 env[1251]: time="2025-07-15T11:29:40.786479172Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\"" Jul 15 11:29:42.732493 kubelet[2123]: E0715 11:29:42.732198 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdpgt" podUID="b065a6c7-4fee-4858-b630-917bce34c00e" Jul 15 11:29:43.305463 kubelet[2123]: I0715 11:29:43.305367 2123 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:29:43.463000 audit[2839]: NETFILTER_CFG table=filter:99 family=2 entries=21 op=nft_register_rule pid=2839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:43.464489 kernel: kauditd_printk_skb: 97 callbacks suppressed Jul 15 11:29:43.464537 kernel: audit: type=1325 audit(1752578983.463:1008): table=filter:99 family=2 entries=21 op=nft_register_rule pid=2839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:43.463000 audit[2839]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffed8192e80 a2=0 a3=7ffed8192e6c items=0 ppid=2231 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:43.470146 kernel: audit: type=1300 audit(1752578983.463:1008): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffed8192e80 a2=0 a3=7ffed8192e6c items=0 ppid=2231 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:43.463000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:43.471982 kernel: audit: type=1327 audit(1752578983.463:1008): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:43.474000 audit[2839]: NETFILTER_CFG table=nat:100 family=2 entries=19 op=nft_register_chain pid=2839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:43.474000 audit[2839]: SYSCALL arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffed8192e80 a2=0 a3=7ffed8192e6c items=0 ppid=2231 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:43.480389 kernel: audit: type=1325 audit(1752578983.474:1009): table=nat:100 family=2 entries=19 op=nft_register_chain pid=2839 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:29:43.480423 kernel: audit: type=1300 audit(1752578983.474:1009): arch=c000003e syscall=46 success=yes exit=6276 a0=3 a1=7ffed8192e80 a2=0 a3=7ffed8192e6c items=0 ppid=2231 pid=2839 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:43.480442 kernel: audit: type=1327 audit(1752578983.474:1009): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:43.474000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:29:44.732363 kubelet[2123]: E0715 11:29:44.732322 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdpgt" podUID="b065a6c7-4fee-4858-b630-917bce34c00e" Jul 15 11:29:45.495376 env[1251]: time="2025-07-15T11:29:45.495314482Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:45.500199 env[1251]: time="2025-07-15T11:29:45.500179850Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:45.504930 env[1251]: time="2025-07-15T11:29:45.504911921Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/cni:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:45.508918 env[1251]: time="2025-07-15T11:29:45.508902456Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/cni@sha256:50686775cc60acb78bd92a66fa2d84e1700b2d8e43a718fbadbf35e59baefb4d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:45.509127 env[1251]: time="2025-07-15T11:29:45.509096908Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/cni:v3.30.2\" returns image reference \"sha256:77a357d0d33e3016e61153f7d2b7de72371579c4aaeb767fb7ef0af606fe1630\"" Jul 15 11:29:45.514487 env[1251]: time="2025-07-15T11:29:45.514459828Z" level=info msg="CreateContainer within sandbox \"9e2b5e7b5465932a50594719e33150375c2a87b55d49133318f5098a7f7fedae\" for container &ContainerMetadata{Name:install-cni,Attempt:0,}" Jul 15 11:29:45.521044 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3827540485.mount: Deactivated successfully. Jul 15 11:29:45.544940 env[1251]: time="2025-07-15T11:29:45.544871186Z" level=info msg="CreateContainer within sandbox \"9e2b5e7b5465932a50594719e33150375c2a87b55d49133318f5098a7f7fedae\" for &ContainerMetadata{Name:install-cni,Attempt:0,} returns container id \"8df94c1f0582e787bfd8c4cdaedb94ac36bccb54118f695099bf816fbabb908e\"" Jul 15 11:29:45.545532 env[1251]: time="2025-07-15T11:29:45.545394644Z" level=info msg="StartContainer for \"8df94c1f0582e787bfd8c4cdaedb94ac36bccb54118f695099bf816fbabb908e\"" Jul 15 11:29:45.560281 systemd[1]: Started cri-containerd-8df94c1f0582e787bfd8c4cdaedb94ac36bccb54118f695099bf816fbabb908e.scope. Jul 15 11:29:45.586000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.586000 audit[2847]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f3fe49d1018 items=0 ppid=2573 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:45.593538 kernel: audit: type=1400 audit(1752578985.586:1010): avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.593594 kernel: audit: type=1300 audit(1752578985.586:1010): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f3fe49d1018 items=0 ppid=2573 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:45.593618 kernel: audit: type=1327 audit(1752578985.586:1010): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864663934633166303538326537383762666438633463646165646239 Jul 15 11:29:45.586000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864663934633166303538326537383762666438633463646165646239 Jul 15 11:29:45.587000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.599331 kernel: audit: type=1400 audit(1752578985.587:1011): avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.587000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.587000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.587000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.587000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.587000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.587000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.587000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.587000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.587000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.587000 audit: BPF prog-id=133 op=LOAD Jul 15 11:29:45.587000 audit[2847]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c000382538 items=0 ppid=2573 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:45.587000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864663934633166303538326537383762666438633463646165646239 Jul 15 11:29:45.596000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.596000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.596000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.596000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.596000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.596000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.596000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.596000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.596000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.596000 audit: BPF prog-id=134 op=LOAD Jul 15 11:29:45.596000 audit[2847]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c000382588 items=0 ppid=2573 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:45.596000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864663934633166303538326537383762666438633463646165646239 Jul 15 11:29:45.599000 audit: BPF prog-id=134 op=UNLOAD Jul 15 11:29:45.599000 audit: BPF prog-id=133 op=UNLOAD Jul 15 11:29:45.599000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.599000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.599000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.599000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.599000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.599000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.599000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.599000 audit[2847]: AVC avc: denied { perfmon } for pid=2847 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.599000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.599000 audit[2847]: AVC avc: denied { bpf } for pid=2847 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:45.599000 audit: BPF prog-id=135 op=LOAD Jul 15 11:29:45.599000 audit[2847]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c000382618 items=0 ppid=2573 pid=2847 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:45.599000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3864663934633166303538326537383762666438633463646165646239 Jul 15 11:29:45.616002 env[1251]: time="2025-07-15T11:29:45.615976311Z" level=info msg="StartContainer for \"8df94c1f0582e787bfd8c4cdaedb94ac36bccb54118f695099bf816fbabb908e\" returns successfully" Jul 15 11:29:46.732694 kubelet[2123]: E0715 11:29:46.732670 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="network is not ready: container runtime network not ready: NetworkReady=false reason:NetworkPluginNotReady message:Network plugin returns error: cni plugin not initialized" pod="calico-system/csi-node-driver-bdpgt" podUID="b065a6c7-4fee-4858-b630-917bce34c00e" Jul 15 11:29:47.319041 env[1251]: time="2025-07-15T11:29:47.318971546Z" level=error msg="failed to reload cni configuration after receiving fs change event(\"/etc/cni/net.d/calico-kubeconfig\": WRITE)" error="cni config load failed: no network config found in /etc/cni/net.d: cni plugin not initialized: failed to load cni config" Jul 15 11:29:47.321307 systemd[1]: cri-containerd-8df94c1f0582e787bfd8c4cdaedb94ac36bccb54118f695099bf816fbabb908e.scope: Deactivated successfully. Jul 15 11:29:47.326000 audit: BPF prog-id=135 op=UNLOAD Jul 15 11:29:47.349289 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-8df94c1f0582e787bfd8c4cdaedb94ac36bccb54118f695099bf816fbabb908e-rootfs.mount: Deactivated successfully. Jul 15 11:29:47.366936 kubelet[2123]: I0715 11:29:47.352888 2123 kubelet_node_status.go:501] "Fast updating node status as it just became ready" Jul 15 11:29:47.389415 env[1251]: time="2025-07-15T11:29:47.389387060Z" level=info msg="shim disconnected" id=8df94c1f0582e787bfd8c4cdaedb94ac36bccb54118f695099bf816fbabb908e Jul 15 11:29:47.389634 env[1251]: time="2025-07-15T11:29:47.389584574Z" level=warning msg="cleaning up after shim disconnected" id=8df94c1f0582e787bfd8c4cdaedb94ac36bccb54118f695099bf816fbabb908e namespace=k8s.io Jul 15 11:29:47.389692 env[1251]: time="2025-07-15T11:29:47.389681722Z" level=info msg="cleaning up dead shim" Jul 15 11:29:47.400401 env[1251]: time="2025-07-15T11:29:47.400368161Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:29:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=2890 runtime=io.containerd.runc.v2\n" Jul 15 11:29:47.589925 systemd[1]: Created slice kubepods-burstable-pod4d847c07_b217_4471_ba1f_db8be894e130.slice. Jul 15 11:29:47.595091 systemd[1]: Created slice kubepods-burstable-podc330bef8_f79b_4274_a807_a934b3cc71d4.slice. Jul 15 11:29:47.624985 kubelet[2123]: I0715 11:29:47.624953 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/4d847c07-b217-4471-ba1f-db8be894e130-config-volume\") pod \"coredns-674b8bbfcf-xlhc8\" (UID: \"4d847c07-b217-4471-ba1f-db8be894e130\") " pod="kube-system/coredns-674b8bbfcf-xlhc8" Jul 15 11:29:47.625096 kubelet[2123]: I0715 11:29:47.624995 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config-volume\" (UniqueName: \"kubernetes.io/configmap/c330bef8-f79b-4274-a807-a934b3cc71d4-config-volume\") pod \"coredns-674b8bbfcf-klb5s\" (UID: \"c330bef8-f79b-4274-a807-a934b3cc71d4\") " pod="kube-system/coredns-674b8bbfcf-klb5s" Jul 15 11:29:47.625096 kubelet[2123]: I0715 11:29:47.625013 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-7b6b8\" (UniqueName: \"kubernetes.io/projected/4d847c07-b217-4471-ba1f-db8be894e130-kube-api-access-7b6b8\") pod \"coredns-674b8bbfcf-xlhc8\" (UID: \"4d847c07-b217-4471-ba1f-db8be894e130\") " pod="kube-system/coredns-674b8bbfcf-xlhc8" Jul 15 11:29:47.625096 kubelet[2123]: I0715 11:29:47.625040 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-mmxbs\" (UniqueName: \"kubernetes.io/projected/c330bef8-f79b-4274-a807-a934b3cc71d4-kube-api-access-mmxbs\") pod \"coredns-674b8bbfcf-klb5s\" (UID: \"c330bef8-f79b-4274-a807-a934b3cc71d4\") " pod="kube-system/coredns-674b8bbfcf-klb5s" Jul 15 11:29:47.637766 systemd[1]: Created slice kubepods-besteffort-pod864a889c_657c_4971_80d3_beba352cc850.slice. Jul 15 11:29:47.642678 systemd[1]: Created slice kubepods-besteffort-podcea21dcf_c636_4c32_9de2_493a871086ec.slice. Jul 15 11:29:47.648504 systemd[1]: Created slice kubepods-besteffort-pod3aa78136_135a_4dab_af0b_7b5a1b7f7b38.slice. Jul 15 11:29:47.655257 systemd[1]: Created slice kubepods-besteffort-pod14076944_c5cd_4df9_b974_62eca0b75763.slice. Jul 15 11:29:47.672588 systemd[1]: Created slice kubepods-besteffort-pod987cfc20_a8f4_4673_935d_50967ef2f542.slice. Jul 15 11:29:47.677639 systemd[1]: Created slice kubepods-besteffort-pod4b4746b6_c971_43e9_be79_e903661bbbbc.slice. Jul 15 11:29:47.725894 kubelet[2123]: I0715 11:29:47.725848 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-4mhm9\" (UniqueName: \"kubernetes.io/projected/4b4746b6-c971-43e9-be79-e903661bbbbc-kube-api-access-4mhm9\") pod \"goldmane-768f4c5c69-pjcl6\" (UID: \"4b4746b6-c971-43e9-be79-e903661bbbbc\") " pod="calico-system/goldmane-768f4c5c69-pjcl6" Jul 15 11:29:47.725894 kubelet[2123]: I0715 11:29:47.725890 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/864a889c-657c-4971-80d3-beba352cc850-calico-apiserver-certs\") pod \"calico-apiserver-6db74f8486-2rx6m\" (UID: \"864a889c-657c-4971-80d3-beba352cc850\") " pod="calico-apiserver/calico-apiserver-6db74f8486-2rx6m" Jul 15 11:29:47.726070 kubelet[2123]: I0715 11:29:47.725928 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-xtblq\" (UniqueName: \"kubernetes.io/projected/cea21dcf-c636-4c32-9de2-493a871086ec-kube-api-access-xtblq\") pod \"calico-apiserver-6db74f8486-272tj\" (UID: \"cea21dcf-c636-4c32-9de2-493a871086ec\") " pod="calico-apiserver/calico-apiserver-6db74f8486-272tj" Jul 15 11:29:47.726070 kubelet[2123]: I0715 11:29:47.725946 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/14076944-c5cd-4df9-b974-62eca0b75763-whisker-ca-bundle\") pod \"whisker-6655dfcbbd-xc6cg\" (UID: \"14076944-c5cd-4df9-b974-62eca0b75763\") " pod="calico-system/whisker-6655dfcbbd-xc6cg" Jul 15 11:29:47.726070 kubelet[2123]: I0715 11:29:47.725976 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-bfgpp\" (UniqueName: \"kubernetes.io/projected/3aa78136-135a-4dab-af0b-7b5a1b7f7b38-kube-api-access-bfgpp\") pod \"calico-apiserver-755674f4c-x5w6w\" (UID: \"3aa78136-135a-4dab-af0b-7b5a1b7f7b38\") " pod="calico-apiserver/calico-apiserver-755674f4c-x5w6w" Jul 15 11:29:47.726070 kubelet[2123]: I0715 11:29:47.725996 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"config\" (UniqueName: \"kubernetes.io/configmap/4b4746b6-c971-43e9-be79-e903661bbbbc-config\") pod \"goldmane-768f4c5c69-pjcl6\" (UID: \"4b4746b6-c971-43e9-be79-e903661bbbbc\") " pod="calico-system/goldmane-768f4c5c69-pjcl6" Jul 15 11:29:47.726070 kubelet[2123]: I0715 11:29:47.726012 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/3aa78136-135a-4dab-af0b-7b5a1b7f7b38-calico-apiserver-certs\") pod \"calico-apiserver-755674f4c-x5w6w\" (UID: \"3aa78136-135a-4dab-af0b-7b5a1b7f7b38\") " pod="calico-apiserver/calico-apiserver-755674f4c-x5w6w" Jul 15 11:29:47.726216 kubelet[2123]: I0715 11:29:47.726031 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"tigera-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/987cfc20-a8f4-4673-935d-50967ef2f542-tigera-ca-bundle\") pod \"calico-kube-controllers-79f4f75899-956zh\" (UID: \"987cfc20-a8f4-4673-935d-50967ef2f542\") " pod="calico-system/calico-kube-controllers-79f4f75899-956zh" Jul 15 11:29:47.726216 kubelet[2123]: I0715 11:29:47.726056 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-key-pair\" (UniqueName: \"kubernetes.io/secret/4b4746b6-c971-43e9-be79-e903661bbbbc-goldmane-key-pair\") pod \"goldmane-768f4c5c69-pjcl6\" (UID: \"4b4746b6-c971-43e9-be79-e903661bbbbc\") " pod="calico-system/goldmane-768f4c5c69-pjcl6" Jul 15 11:29:47.726216 kubelet[2123]: I0715 11:29:47.726072 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-2cjmm\" (UniqueName: \"kubernetes.io/projected/864a889c-657c-4971-80d3-beba352cc850-kube-api-access-2cjmm\") pod \"calico-apiserver-6db74f8486-2rx6m\" (UID: \"864a889c-657c-4971-80d3-beba352cc850\") " pod="calico-apiserver/calico-apiserver-6db74f8486-2rx6m" Jul 15 11:29:47.726216 kubelet[2123]: I0715 11:29:47.726099 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/14076944-c5cd-4df9-b974-62eca0b75763-whisker-backend-key-pair\") pod \"whisker-6655dfcbbd-xc6cg\" (UID: \"14076944-c5cd-4df9-b974-62eca0b75763\") " pod="calico-system/whisker-6655dfcbbd-xc6cg" Jul 15 11:29:47.726216 kubelet[2123]: I0715 11:29:47.726116 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"goldmane-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/4b4746b6-c971-43e9-be79-e903661bbbbc-goldmane-ca-bundle\") pod \"goldmane-768f4c5c69-pjcl6\" (UID: \"4b4746b6-c971-43e9-be79-e903661bbbbc\") " pod="calico-system/goldmane-768f4c5c69-pjcl6" Jul 15 11:29:47.726343 kubelet[2123]: I0715 11:29:47.726133 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-wtztq\" (UniqueName: \"kubernetes.io/projected/987cfc20-a8f4-4673-935d-50967ef2f542-kube-api-access-wtztq\") pod \"calico-kube-controllers-79f4f75899-956zh\" (UID: \"987cfc20-a8f4-4673-935d-50967ef2f542\") " pod="calico-system/calico-kube-controllers-79f4f75899-956zh" Jul 15 11:29:47.726343 kubelet[2123]: I0715 11:29:47.726162 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/cea21dcf-c636-4c32-9de2-493a871086ec-calico-apiserver-certs\") pod \"calico-apiserver-6db74f8486-272tj\" (UID: \"cea21dcf-c636-4c32-9de2-493a871086ec\") " pod="calico-apiserver/calico-apiserver-6db74f8486-272tj" Jul 15 11:29:47.726343 kubelet[2123]: I0715 11:29:47.726179 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-9ssnc\" (UniqueName: \"kubernetes.io/projected/14076944-c5cd-4df9-b974-62eca0b75763-kube-api-access-9ssnc\") pod \"whisker-6655dfcbbd-xc6cg\" (UID: \"14076944-c5cd-4df9-b974-62eca0b75763\") " pod="calico-system/whisker-6655dfcbbd-xc6cg" Jul 15 11:29:47.812575 env[1251]: time="2025-07-15T11:29:47.812550737Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\"" Jul 15 11:29:47.893356 env[1251]: time="2025-07-15T11:29:47.893277184Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xlhc8,Uid:4d847c07-b217-4471-ba1f-db8be894e130,Namespace:kube-system,Attempt:0,}" Jul 15 11:29:47.898366 env[1251]: time="2025-07-15T11:29:47.898174655Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-klb5s,Uid:c330bef8-f79b-4274-a807-a934b3cc71d4,Namespace:kube-system,Attempt:0,}" Jul 15 11:29:47.941758 env[1251]: time="2025-07-15T11:29:47.941723744Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6db74f8486-2rx6m,Uid:864a889c-657c-4971-80d3-beba352cc850,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:29:47.947892 env[1251]: time="2025-07-15T11:29:47.947866328Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6db74f8486-272tj,Uid:cea21dcf-c636-4c32-9de2-493a871086ec,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:29:47.953947 env[1251]: time="2025-07-15T11:29:47.953917668Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755674f4c-x5w6w,Uid:3aa78136-135a-4dab-af0b-7b5a1b7f7b38,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:29:47.970715 env[1251]: time="2025-07-15T11:29:47.970685133Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6655dfcbbd-xc6cg,Uid:14076944-c5cd-4df9-b974-62eca0b75763,Namespace:calico-system,Attempt:0,}" Jul 15 11:29:47.976493 env[1251]: time="2025-07-15T11:29:47.976450212Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79f4f75899-956zh,Uid:987cfc20-a8f4-4673-935d-50967ef2f542,Namespace:calico-system,Attempt:0,}" Jul 15 11:29:47.989303 env[1251]: time="2025-07-15T11:29:47.989275574Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-pjcl6,Uid:4b4746b6-c971-43e9-be79-e903661bbbbc,Namespace:calico-system,Attempt:0,}" Jul 15 11:29:48.326662 env[1251]: time="2025-07-15T11:29:48.326614428Z" level=error msg="Failed to destroy network for sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.326979 env[1251]: time="2025-07-15T11:29:48.326877106Z" level=error msg="encountered an error cleaning up failed sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.326979 env[1251]: time="2025-07-15T11:29:48.326905904Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xlhc8,Uid:4d847c07-b217-4471-ba1f-db8be894e130,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.329135 env[1251]: time="2025-07-15T11:29:48.329106446Z" level=error msg="Failed to destroy network for sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.329322 env[1251]: time="2025-07-15T11:29:48.329301250Z" level=error msg="encountered an error cleaning up failed sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.329376 env[1251]: time="2025-07-15T11:29:48.329338743Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6db74f8486-2rx6m,Uid:864a889c-657c-4971-80d3-beba352cc850,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.339356 env[1251]: time="2025-07-15T11:29:48.339315940Z" level=error msg="Failed to destroy network for sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.339583 env[1251]: time="2025-07-15T11:29:48.339562832Z" level=error msg="encountered an error cleaning up failed sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.339634 env[1251]: time="2025-07-15T11:29:48.339592751Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6db74f8486-272tj,Uid:cea21dcf-c636-4c32-9de2-493a871086ec,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.347154 env[1251]: time="2025-07-15T11:29:48.347124246Z" level=error msg="Failed to destroy network for sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.356643 env[1251]: time="2025-07-15T11:29:48.347453482Z" level=error msg="encountered an error cleaning up failed sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.356643 env[1251]: time="2025-07-15T11:29:48.347482344Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755674f4c-x5w6w,Uid:3aa78136-135a-4dab-af0b-7b5a1b7f7b38,Namespace:calico-apiserver,Attempt:0,} failed, error" error="failed to setup network for sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.368156 env[1251]: time="2025-07-15T11:29:48.368126543Z" level=error msg="Failed to destroy network for sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.368488 env[1251]: time="2025-07-15T11:29:48.368469236Z" level=error msg="encountered an error cleaning up failed sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.374688 env[1251]: time="2025-07-15T11:29:48.368579501Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-pjcl6,Uid:4b4746b6-c971-43e9-be79-e903661bbbbc,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.369668 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9-shm.mount: Deactivated successfully. Jul 15 11:29:48.376247 env[1251]: time="2025-07-15T11:29:48.375270409Z" level=error msg="Failed to destroy network for sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.377676 kubelet[2123]: E0715 11:29:48.377583 2123 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.377904 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393-shm.mount: Deactivated successfully. Jul 15 11:29:48.378679 env[1251]: time="2025-07-15T11:29:48.378613817Z" level=error msg="encountered an error cleaning up failed sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.378721 env[1251]: time="2025-07-15T11:29:48.378691495Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-6655dfcbbd-xc6cg,Uid:14076944-c5cd-4df9-b974-62eca0b75763,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.379435 kubelet[2123]: E0715 11:29:48.379374 2123 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6db74f8486-2rx6m" Jul 15 11:29:48.380095 kubelet[2123]: E0715 11:29:48.380029 2123 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.380095 kubelet[2123]: E0715 11:29:48.380066 2123 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6655dfcbbd-xc6cg" Jul 15 11:29:48.380297 env[1251]: time="2025-07-15T11:29:48.380275184Z" level=error msg="Failed to destroy network for sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.380628 env[1251]: time="2025-07-15T11:29:48.380609199Z" level=error msg="encountered an error cleaning up failed sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.380717 env[1251]: time="2025-07-15T11:29:48.380698993Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79f4f75899-956zh,Uid:987cfc20-a8f4-4673-935d-50967ef2f542,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.381850 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f-shm.mount: Deactivated successfully. Jul 15 11:29:48.385095 kubelet[2123]: E0715 11:29:48.384628 2123 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6db74f8486-2rx6m" Jul 15 11:29:48.385095 kubelet[2123]: E0715 11:29:48.384644 2123 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.385095 kubelet[2123]: E0715 11:29:48.384690 2123 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-755674f4c-x5w6w" Jul 15 11:29:48.385298 kubelet[2123]: E0715 11:29:48.384697 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6db74f8486-2rx6m_calico-apiserver(864a889c-657c-4971-80d3-beba352cc850)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6db74f8486-2rx6m_calico-apiserver(864a889c-657c-4971-80d3-beba352cc850)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6db74f8486-2rx6m" podUID="864a889c-657c-4971-80d3-beba352cc850" Jul 15 11:29:48.385298 kubelet[2123]: E0715 11:29:48.384721 2123 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-755674f4c-x5w6w" Jul 15 11:29:48.385408 kubelet[2123]: E0715 11:29:48.384758 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-755674f4c-x5w6w_calico-apiserver(3aa78136-135a-4dab-af0b-7b5a1b7f7b38)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-755674f4c-x5w6w_calico-apiserver(3aa78136-135a-4dab-af0b-7b5a1b7f7b38)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-755674f4c-x5w6w" podUID="3aa78136-135a-4dab-af0b-7b5a1b7f7b38" Jul 15 11:29:48.385408 kubelet[2123]: E0715 11:29:48.384766 2123 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.385408 kubelet[2123]: E0715 11:29:48.384787 2123 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.385533 kubelet[2123]: E0715 11:29:48.384787 2123 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6db74f8486-272tj" Jul 15 11:29:48.385533 kubelet[2123]: E0715 11:29:48.384799 2123 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-pjcl6" Jul 15 11:29:48.385533 kubelet[2123]: E0715 11:29:48.384799 2123 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-apiserver/calico-apiserver-6db74f8486-272tj" Jul 15 11:29:48.385533 kubelet[2123]: E0715 11:29:48.384811 2123 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/goldmane-768f4c5c69-pjcl6" Jul 15 11:29:48.385662 kubelet[2123]: E0715 11:29:48.384834 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-apiserver-6db74f8486-272tj_calico-apiserver(cea21dcf-c636-4c32-9de2-493a871086ec)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-apiserver-6db74f8486-272tj_calico-apiserver(cea21dcf-c636-4c32-9de2-493a871086ec)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6db74f8486-272tj" podUID="cea21dcf-c636-4c32-9de2-493a871086ec" Jul 15 11:29:48.385662 kubelet[2123]: E0715 11:29:48.384848 2123 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.385662 kubelet[2123]: E0715 11:29:48.384836 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"goldmane-768f4c5c69-pjcl6_calico-system(4b4746b6-c971-43e9-be79-e903661bbbbc)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"goldmane-768f4c5c69-pjcl6_calico-system(4b4746b6-c971-43e9-be79-e903661bbbbc)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-pjcl6" podUID="4b4746b6-c971-43e9-be79-e903661bbbbc" Jul 15 11:29:48.385790 kubelet[2123]: E0715 11:29:48.384859 2123 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-xlhc8" Jul 15 11:29:48.385790 kubelet[2123]: E0715 11:29:48.384868 2123 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-xlhc8" Jul 15 11:29:48.385790 kubelet[2123]: E0715 11:29:48.384906 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-xlhc8_kube-system(4d847c07-b217-4471-ba1f-db8be894e130)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-xlhc8_kube-system(4d847c07-b217-4471-ba1f-db8be894e130)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-xlhc8" podUID="4d847c07-b217-4471-ba1f-db8be894e130" Jul 15 11:29:48.385982 kubelet[2123]: E0715 11:29:48.384620 2123 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/whisker-6655dfcbbd-xc6cg" Jul 15 11:29:48.385982 kubelet[2123]: E0715 11:29:48.384943 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"whisker-6655dfcbbd-xc6cg_calico-system(14076944-c5cd-4df9-b974-62eca0b75763)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"whisker-6655dfcbbd-xc6cg_calico-system(14076944-c5cd-4df9-b974-62eca0b75763)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6655dfcbbd-xc6cg" podUID="14076944-c5cd-4df9-b974-62eca0b75763" Jul 15 11:29:48.385982 kubelet[2123]: E0715 11:29:48.385022 2123 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.386104 kubelet[2123]: E0715 11:29:48.385041 2123 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-79f4f75899-956zh" Jul 15 11:29:48.386104 kubelet[2123]: E0715 11:29:48.385065 2123 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/calico-kube-controllers-79f4f75899-956zh" Jul 15 11:29:48.386104 kubelet[2123]: E0715 11:29:48.385910 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"calico-kube-controllers-79f4f75899-956zh_calico-system(987cfc20-a8f4-4673-935d-50967ef2f542)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"calico-kube-controllers-79f4f75899-956zh_calico-system(987cfc20-a8f4-4673-935d-50967ef2f542)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-79f4f75899-956zh" podUID="987cfc20-a8f4-4673-935d-50967ef2f542" Jul 15 11:29:48.390751 env[1251]: time="2025-07-15T11:29:48.389795163Z" level=error msg="Failed to destroy network for sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.392405 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904-shm.mount: Deactivated successfully. Jul 15 11:29:48.394237 env[1251]: time="2025-07-15T11:29:48.394188498Z" level=error msg="encountered an error cleaning up failed sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.394441 env[1251]: time="2025-07-15T11:29:48.394407068Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-klb5s,Uid:c330bef8-f79b-4274-a807-a934b3cc71d4,Namespace:kube-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.395560 kubelet[2123]: E0715 11:29:48.394808 2123 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.395560 kubelet[2123]: E0715 11:29:48.394866 2123 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-klb5s" Jul 15 11:29:48.395560 kubelet[2123]: E0715 11:29:48.394888 2123 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="kube-system/coredns-674b8bbfcf-klb5s" Jul 15 11:29:48.396767 kubelet[2123]: E0715 11:29:48.394958 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"coredns-674b8bbfcf-klb5s_kube-system(c330bef8-f79b-4274-a807-a934b3cc71d4)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"coredns-674b8bbfcf-klb5s_kube-system(c330bef8-f79b-4274-a807-a934b3cc71d4)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-klb5s" podUID="c330bef8-f79b-4274-a807-a934b3cc71d4" Jul 15 11:29:48.734910 systemd[1]: Created slice kubepods-besteffort-podb065a6c7_4fee_4858_b630_917bce34c00e.slice. Jul 15 11:29:48.736904 env[1251]: time="2025-07-15T11:29:48.736880780Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bdpgt,Uid:b065a6c7-4fee-4858-b630-917bce34c00e,Namespace:calico-system,Attempt:0,}" Jul 15 11:29:48.813625 kubelet[2123]: I0715 11:29:48.813598 2123 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:29:48.814435 kubelet[2123]: I0715 11:29:48.814423 2123 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:29:48.820071 kubelet[2123]: I0715 11:29:48.820055 2123 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:29:48.821532 env[1251]: time="2025-07-15T11:29:48.821514108Z" level=info msg="StopPodSandbox for \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\"" Jul 15 11:29:48.821822 env[1251]: time="2025-07-15T11:29:48.821809496Z" level=info msg="StopPodSandbox for \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\"" Jul 15 11:29:48.822023 env[1251]: time="2025-07-15T11:29:48.822011342Z" level=info msg="StopPodSandbox for \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\"" Jul 15 11:29:48.822999 kubelet[2123]: I0715 11:29:48.822721 2123 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:29:48.823087 env[1251]: time="2025-07-15T11:29:48.823068949Z" level=info msg="StopPodSandbox for \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\"" Jul 15 11:29:48.831403 kubelet[2123]: I0715 11:29:48.830634 2123 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:29:48.832353 env[1251]: time="2025-07-15T11:29:48.831656458Z" level=info msg="StopPodSandbox for \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\"" Jul 15 11:29:48.842464 kubelet[2123]: I0715 11:29:48.842445 2123 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:29:48.844399 env[1251]: time="2025-07-15T11:29:48.844372236Z" level=info msg="StopPodSandbox for \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\"" Jul 15 11:29:48.846738 kubelet[2123]: I0715 11:29:48.845596 2123 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:29:48.847168 env[1251]: time="2025-07-15T11:29:48.847142360Z" level=info msg="StopPodSandbox for \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\"" Jul 15 11:29:48.848967 kubelet[2123]: I0715 11:29:48.848179 2123 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:29:48.849428 env[1251]: time="2025-07-15T11:29:48.848631272Z" level=info msg="StopPodSandbox for \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\"" Jul 15 11:29:48.891371 env[1251]: time="2025-07-15T11:29:48.891320929Z" level=error msg="Failed to destroy network for sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\"" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.891691 env[1251]: time="2025-07-15T11:29:48.891673039Z" level=error msg="encountered an error cleaning up failed sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\", marking sandbox state as SANDBOX_UNKNOWN" error="plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.891771 env[1251]: time="2025-07-15T11:29:48.891754093Z" level=error msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bdpgt,Uid:b065a6c7-4fee-4858-b630-917bce34c00e,Namespace:calico-system,Attempt:0,} failed, error" error="failed to setup network for sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.893105 kubelet[2123]: E0715 11:29:48.891964 2123 log.go:32] "RunPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.893105 kubelet[2123]: E0715 11:29:48.892067 2123 kuberuntime_sandbox.go:70] "Failed to create sandbox for pod" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-bdpgt" Jul 15 11:29:48.893105 kubelet[2123]: E0715 11:29:48.892090 2123 kuberuntime_manager.go:1252] "CreatePodSandbox for pod failed" err="rpc error: code = Unknown desc = failed to setup network for sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\": plugin type=\"calico\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" pod="calico-system/csi-node-driver-bdpgt" Jul 15 11:29:48.893226 kubelet[2123]: E0715 11:29:48.892134 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"CreatePodSandbox\" for \"csi-node-driver-bdpgt_calico-system(b065a6c7-4fee-4858-b630-917bce34c00e)\" with CreatePodSandboxError: \"Failed to create sandbox for pod \\\"csi-node-driver-bdpgt_calico-system(b065a6c7-4fee-4858-b630-917bce34c00e)\\\": rpc error: code = Unknown desc = failed to setup network for sandbox \\\"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\\\": plugin type=\\\"calico\\\" failed (add): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-bdpgt" podUID="b065a6c7-4fee-4858-b630-917bce34c00e" Jul 15 11:29:48.894991 env[1251]: time="2025-07-15T11:29:48.894958690Z" level=error msg="StopPodSandbox for \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\" failed" error="failed to destroy network for sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.896859 kubelet[2123]: E0715 11:29:48.895940 2123 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:29:48.896859 kubelet[2123]: E0715 11:29:48.895982 2123 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330"} Jul 15 11:29:48.896859 kubelet[2123]: E0715 11:29:48.896027 2123 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"864a889c-657c-4971-80d3-beba352cc850\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:29:48.896859 kubelet[2123]: E0715 11:29:48.896043 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"864a889c-657c-4971-80d3-beba352cc850\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6db74f8486-2rx6m" podUID="864a889c-657c-4971-80d3-beba352cc850" Jul 15 11:29:48.901579 env[1251]: time="2025-07-15T11:29:48.901547858Z" level=error msg="StopPodSandbox for \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\" failed" error="failed to destroy network for sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.901906 kubelet[2123]: E0715 11:29:48.901799 2123 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:29:48.901906 kubelet[2123]: E0715 11:29:48.901832 2123 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f"} Jul 15 11:29:48.901906 kubelet[2123]: E0715 11:29:48.901869 2123 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"987cfc20-a8f4-4673-935d-50967ef2f542\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:29:48.901906 kubelet[2123]: E0715 11:29:48.901885 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"987cfc20-a8f4-4673-935d-50967ef2f542\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/calico-kube-controllers-79f4f75899-956zh" podUID="987cfc20-a8f4-4673-935d-50967ef2f542" Jul 15 11:29:48.902488 env[1251]: time="2025-07-15T11:29:48.902462798Z" level=error msg="StopPodSandbox for \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\" failed" error="failed to destroy network for sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.902668 kubelet[2123]: E0715 11:29:48.902586 2123 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:29:48.902668 kubelet[2123]: E0715 11:29:48.902606 2123 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c"} Jul 15 11:29:48.902668 kubelet[2123]: E0715 11:29:48.902636 2123 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4d847c07-b217-4471-ba1f-db8be894e130\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:29:48.902668 kubelet[2123]: E0715 11:29:48.902650 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4d847c07-b217-4471-ba1f-db8be894e130\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-xlhc8" podUID="4d847c07-b217-4471-ba1f-db8be894e130" Jul 15 11:29:48.918905 env[1251]: time="2025-07-15T11:29:48.918843162Z" level=error msg="StopPodSandbox for \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\" failed" error="failed to destroy network for sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.919244 kubelet[2123]: E0715 11:29:48.919108 2123 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:29:48.919244 kubelet[2123]: E0715 11:29:48.919183 2123 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393"} Jul 15 11:29:48.919244 kubelet[2123]: E0715 11:29:48.919208 2123 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"14076944-c5cd-4df9-b974-62eca0b75763\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:29:48.919244 kubelet[2123]: E0715 11:29:48.919226 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"14076944-c5cd-4df9-b974-62eca0b75763\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/whisker-6655dfcbbd-xc6cg" podUID="14076944-c5cd-4df9-b974-62eca0b75763" Jul 15 11:29:48.926803 env[1251]: time="2025-07-15T11:29:48.926771934Z" level=error msg="StopPodSandbox for \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\" failed" error="failed to destroy network for sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.927143 kubelet[2123]: E0715 11:29:48.927008 2123 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:29:48.927143 kubelet[2123]: E0715 11:29:48.927051 2123 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904"} Jul 15 11:29:48.927143 kubelet[2123]: E0715 11:29:48.927074 2123 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"c330bef8-f79b-4274-a807-a934b3cc71d4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:29:48.927143 kubelet[2123]: E0715 11:29:48.927088 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"c330bef8-f79b-4274-a807-a934b3cc71d4\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="kube-system/coredns-674b8bbfcf-klb5s" podUID="c330bef8-f79b-4274-a807-a934b3cc71d4" Jul 15 11:29:48.927372 env[1251]: time="2025-07-15T11:29:48.927355070Z" level=error msg="StopPodSandbox for \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\" failed" error="failed to destroy network for sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.932283 env[1251]: time="2025-07-15T11:29:48.929453511Z" level=error msg="StopPodSandbox for \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\" failed" error="failed to destroy network for sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.932434 kubelet[2123]: E0715 11:29:48.927493 2123 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:29:48.932434 kubelet[2123]: E0715 11:29:48.927509 2123 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9"} Jul 15 11:29:48.932434 kubelet[2123]: E0715 11:29:48.927523 2123 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"4b4746b6-c971-43e9-be79-e903661bbbbc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:29:48.932434 kubelet[2123]: E0715 11:29:48.927548 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"4b4746b6-c971-43e9-be79-e903661bbbbc\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/goldmane-768f4c5c69-pjcl6" podUID="4b4746b6-c971-43e9-be79-e903661bbbbc" Jul 15 11:29:48.932575 kubelet[2123]: E0715 11:29:48.929653 2123 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:29:48.932575 kubelet[2123]: E0715 11:29:48.929669 2123 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6"} Jul 15 11:29:48.932575 kubelet[2123]: E0715 11:29:48.929682 2123 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"3aa78136-135a-4dab-af0b-7b5a1b7f7b38\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:29:48.932575 kubelet[2123]: E0715 11:29:48.929695 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"3aa78136-135a-4dab-af0b-7b5a1b7f7b38\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-755674f4c-x5w6w" podUID="3aa78136-135a-4dab-af0b-7b5a1b7f7b38" Jul 15 11:29:48.956929 env[1251]: time="2025-07-15T11:29:48.956892287Z" level=error msg="StopPodSandbox for \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\" failed" error="failed to destroy network for sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:48.957198 kubelet[2123]: E0715 11:29:48.957172 2123 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:29:48.957245 kubelet[2123]: E0715 11:29:48.957209 2123 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a"} Jul 15 11:29:48.957245 kubelet[2123]: E0715 11:29:48.957231 2123 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"cea21dcf-c636-4c32-9de2-493a871086ec\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:29:48.957352 kubelet[2123]: E0715 11:29:48.957248 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"cea21dcf-c636-4c32-9de2-493a871086ec\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-apiserver/calico-apiserver-6db74f8486-272tj" podUID="cea21dcf-c636-4c32-9de2-493a871086ec" Jul 15 11:29:49.850898 kubelet[2123]: I0715 11:29:49.850496 2123 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:29:49.851265 env[1251]: time="2025-07-15T11:29:49.851247623Z" level=info msg="StopPodSandbox for \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\"" Jul 15 11:29:49.868617 env[1251]: time="2025-07-15T11:29:49.868580144Z" level=error msg="StopPodSandbox for \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\" failed" error="failed to destroy network for sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" Jul 15 11:29:49.868967 kubelet[2123]: E0715 11:29:49.868875 2123 log.go:32] "StopPodSandbox from runtime service failed" err="rpc error: code = Unknown desc = failed to destroy network for sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\": plugin type=\"calico\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/" podSandboxID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:29:49.868967 kubelet[2123]: E0715 11:29:49.868911 2123 kuberuntime_manager.go:1586] "Failed to stop sandbox" podSandboxID={"Type":"containerd","ID":"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248"} Jul 15 11:29:49.868967 kubelet[2123]: E0715 11:29:49.868932 2123 kuberuntime_manager.go:1161] "killPodWithSyncResult failed" err="failed to \"KillPodSandbox\" for \"b065a6c7-4fee-4858-b630-917bce34c00e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" Jul 15 11:29:49.868967 kubelet[2123]: E0715 11:29:49.868946 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"KillPodSandbox\" for \"b065a6c7-4fee-4858-b630-917bce34c00e\" with KillPodSandboxError: \"rpc error: code = Unknown desc = failed to destroy network for sandbox \\\"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\\\": plugin type=\\\"calico\\\" failed (delete): stat /var/lib/calico/nodename: no such file or directory: check that the calico/node container is running and has mounted /var/lib/calico/\"" pod="calico-system/csi-node-driver-bdpgt" podUID="b065a6c7-4fee-4858-b630-917bce34c00e" Jul 15 11:29:54.781218 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount580374240.mount: Deactivated successfully. Jul 15 11:29:54.874581 env[1251]: time="2025-07-15T11:29:54.874553672Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:54.875837 env[1251]: time="2025-07-15T11:29:54.875822502Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:54.876521 env[1251]: time="2025-07-15T11:29:54.876503895Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:54.877235 env[1251]: time="2025-07-15T11:29:54.877218317Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node@sha256:e94d49349cc361ef2216d27dda4a097278984d778279f66e79b0616c827c6760,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:29:54.879732 env[1251]: time="2025-07-15T11:29:54.877896292Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node:v3.30.2\" returns image reference \"sha256:cc52550d767f73458fee2ee68db9db5de30d175e8fa4569ebdb43610127b6d20\"" Jul 15 11:29:54.967804 env[1251]: time="2025-07-15T11:29:54.967779380Z" level=info msg="CreateContainer within sandbox \"9e2b5e7b5465932a50594719e33150375c2a87b55d49133318f5098a7f7fedae\" for container &ContainerMetadata{Name:calico-node,Attempt:0,}" Jul 15 11:29:54.994635 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3945169468.mount: Deactivated successfully. Jul 15 11:29:55.003505 env[1251]: time="2025-07-15T11:29:55.003472624Z" level=info msg="CreateContainer within sandbox \"9e2b5e7b5465932a50594719e33150375c2a87b55d49133318f5098a7f7fedae\" for &ContainerMetadata{Name:calico-node,Attempt:0,} returns container id \"e11d2450fa4c7aabf7db26156498c268705c85ff4da2d31c15f516fac023eb98\"" Jul 15 11:29:55.006239 env[1251]: time="2025-07-15T11:29:55.006208117Z" level=info msg="StartContainer for \"e11d2450fa4c7aabf7db26156498c268705c85ff4da2d31c15f516fac023eb98\"" Jul 15 11:29:55.024282 systemd[1]: Started cri-containerd-e11d2450fa4c7aabf7db26156498c268705c85ff4da2d31c15f516fac023eb98.scope. Jul 15 11:29:55.047000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.071351 kernel: kauditd_printk_skb: 40 callbacks suppressed Jul 15 11:29:55.074383 kernel: audit: type=1400 audit(1752578995.047:1017): avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.084860 kernel: audit: type=1300 audit(1752578995.047:1017): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f3b164183f8 items=0 ppid=2573 pid=3314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:55.084907 kernel: audit: type=1327 audit(1752578995.047:1017): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531316432343530666134633761616266376462323631353634393863 Jul 15 11:29:55.089143 kernel: audit: type=1400 audit(1752578995.048:1018): avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.089219 kernel: audit: type=1400 audit(1752578995.048:1018): avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.089260 kernel: audit: type=1400 audit(1752578995.048:1018): avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.089289 kernel: audit: type=1400 audit(1752578995.048:1018): avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.089314 kernel: audit: type=1400 audit(1752578995.048:1018): avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.089386 kernel: audit: type=1400 audit(1752578995.048:1018): avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.089410 kernel: audit: type=1400 audit(1752578995.048:1018): avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.047000 audit[3314]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7f3b164183f8 items=0 ppid=2573 pid=3314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:55.047000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531316432343530666134633761616266376462323631353634393863 Jul 15 11:29:55.048000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.048000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.048000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.048000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.048000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.048000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.048000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.048000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.048000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.048000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.048000 audit: BPF prog-id=136 op=LOAD Jul 15 11:29:55.048000 audit[3314]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003dc2c8 items=0 ppid=2573 pid=3314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:55.048000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531316432343530666134633761616266376462323631353634393863 Jul 15 11:29:55.059000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.059000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.059000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.059000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.059000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.059000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.059000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.059000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.059000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.059000 audit: BPF prog-id=137 op=LOAD Jul 15 11:29:55.059000 audit[3314]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003dc318 items=0 ppid=2573 pid=3314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:55.059000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531316432343530666134633761616266376462323631353634393863 Jul 15 11:29:55.068000 audit: BPF prog-id=137 op=UNLOAD Jul 15 11:29:55.068000 audit: BPF prog-id=136 op=UNLOAD Jul 15 11:29:55.068000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.068000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.068000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.068000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.068000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.068000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.068000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.068000 audit[3314]: AVC avc: denied { perfmon } for pid=3314 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.068000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.068000 audit[3314]: AVC avc: denied { bpf } for pid=3314 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:55.068000 audit: BPF prog-id=138 op=LOAD Jul 15 11:29:55.068000 audit[3314]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003dc3a8 items=0 ppid=2573 pid=3314 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:55.068000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6531316432343530666134633761616266376462323631353634393863 Jul 15 11:29:55.106223 env[1251]: time="2025-07-15T11:29:55.095515122Z" level=info msg="StartContainer for \"e11d2450fa4c7aabf7db26156498c268705c85ff4da2d31c15f516fac023eb98\" returns successfully" Jul 15 11:29:55.931679 systemd[1]: run-containerd-runc-k8s.io-e11d2450fa4c7aabf7db26156498c268705c85ff4da2d31c15f516fac023eb98-runc.ptFhl4.mount: Deactivated successfully. Jul 15 11:29:56.014819 kubelet[2123]: I0715 11:29:56.012619 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-node-sgknc" podStartSLOduration=1.7889639339999999 podStartE2EDuration="21.008032972s" podCreationTimestamp="2025-07-15 11:29:35 +0000 UTC" firstStartedPulling="2025-07-15 11:29:35.659491964 +0000 UTC m=+18.091041724" lastFinishedPulling="2025-07-15 11:29:54.878560997 +0000 UTC m=+37.310110762" observedRunningTime="2025-07-15 11:29:56.006296169 +0000 UTC m=+38.437845945" watchObservedRunningTime="2025-07-15 11:29:56.008032972 +0000 UTC m=+38.439582747" Jul 15 11:29:56.136336 kernel: wireguard: WireGuard 1.0.0 loaded. See www.wireguard.com for information. Jul 15 11:29:56.137435 kernel: wireguard: Copyright (C) 2015-2019 Jason A. Donenfeld . All Rights Reserved. Jul 15 11:29:56.510054 env[1251]: time="2025-07-15T11:29:56.510022334Z" level=info msg="StopPodSandbox for \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\"" Jul 15 11:29:56.872918 systemd[1]: run-containerd-runc-k8s.io-e11d2450fa4c7aabf7db26156498c268705c85ff4da2d31c15f516fac023eb98-runc.fCUGaR.mount: Deactivated successfully. Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:56.628 [INFO][3393] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:56.629 [INFO][3393] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" iface="eth0" netns="/var/run/netns/cni-1c8ce409-8a34-2448-bd52-ac1c7375f77e" Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:56.629 [INFO][3393] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" iface="eth0" netns="/var/run/netns/cni-1c8ce409-8a34-2448-bd52-ac1c7375f77e" Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:56.631 [INFO][3393] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" iface="eth0" netns="/var/run/netns/cni-1c8ce409-8a34-2448-bd52-ac1c7375f77e" Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:56.631 [INFO][3393] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:56.631 [INFO][3393] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:57.059 [INFO][3412] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" HandleID="k8s-pod-network.ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Workload="localhost-k8s-whisker--6655dfcbbd--xc6cg-eth0" Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:57.063 [INFO][3412] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:57.064 [INFO][3412] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:57.079 [WARNING][3412] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" HandleID="k8s-pod-network.ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Workload="localhost-k8s-whisker--6655dfcbbd--xc6cg-eth0" Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:57.079 [INFO][3412] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" HandleID="k8s-pod-network.ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Workload="localhost-k8s-whisker--6655dfcbbd--xc6cg-eth0" Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:57.080 [INFO][3412] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:29:57.083497 env[1251]: 2025-07-15 11:29:57.081 [INFO][3393] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:29:57.094028 env[1251]: time="2025-07-15T11:29:57.085533350Z" level=info msg="TearDown network for sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\" successfully" Jul 15 11:29:57.094028 env[1251]: time="2025-07-15T11:29:57.085554295Z" level=info msg="StopPodSandbox for \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\" returns successfully" Jul 15 11:29:57.084964 systemd[1]: run-netns-cni\x2d1c8ce409\x2d8a34\x2d2448\x2dbd52\x2dac1c7375f77e.mount: Deactivated successfully. Jul 15 11:29:57.246542 kubelet[2123]: I0715 11:29:57.246146 2123 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-9ssnc\" (UniqueName: \"kubernetes.io/projected/14076944-c5cd-4df9-b974-62eca0b75763-kube-api-access-9ssnc\") pod \"14076944-c5cd-4df9-b974-62eca0b75763\" (UID: \"14076944-c5cd-4df9-b974-62eca0b75763\") " Jul 15 11:29:57.246542 kubelet[2123]: I0715 11:29:57.246203 2123 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/14076944-c5cd-4df9-b974-62eca0b75763-whisker-backend-key-pair\") pod \"14076944-c5cd-4df9-b974-62eca0b75763\" (UID: \"14076944-c5cd-4df9-b974-62eca0b75763\") " Jul 15 11:29:57.246542 kubelet[2123]: I0715 11:29:57.246225 2123 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/14076944-c5cd-4df9-b974-62eca0b75763-whisker-ca-bundle\") pod \"14076944-c5cd-4df9-b974-62eca0b75763\" (UID: \"14076944-c5cd-4df9-b974-62eca0b75763\") " Jul 15 11:29:57.255451 kubelet[2123]: I0715 11:29:57.254443 2123 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/configmap/14076944-c5cd-4df9-b974-62eca0b75763-whisker-ca-bundle" (OuterVolumeSpecName: "whisker-ca-bundle") pod "14076944-c5cd-4df9-b974-62eca0b75763" (UID: "14076944-c5cd-4df9-b974-62eca0b75763"). InnerVolumeSpecName "whisker-ca-bundle". PluginName "kubernetes.io/configmap", VolumeGIDValue "" Jul 15 11:29:57.258512 systemd[1]: var-lib-kubelet-pods-14076944\x2dc5cd\x2d4df9\x2db974\x2d62eca0b75763-volumes-kubernetes.io\x7esecret-whisker\x2dbackend\x2dkey\x2dpair.mount: Deactivated successfully. Jul 15 11:29:57.259367 kubelet[2123]: I0715 11:29:57.259339 2123 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/14076944-c5cd-4df9-b974-62eca0b75763-whisker-backend-key-pair" (OuterVolumeSpecName: "whisker-backend-key-pair") pod "14076944-c5cd-4df9-b974-62eca0b75763" (UID: "14076944-c5cd-4df9-b974-62eca0b75763"). InnerVolumeSpecName "whisker-backend-key-pair". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 15 11:29:57.260008 kubelet[2123]: I0715 11:29:57.259990 2123 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/14076944-c5cd-4df9-b974-62eca0b75763-kube-api-access-9ssnc" (OuterVolumeSpecName: "kube-api-access-9ssnc") pod "14076944-c5cd-4df9-b974-62eca0b75763" (UID: "14076944-c5cd-4df9-b974-62eca0b75763"). InnerVolumeSpecName "kube-api-access-9ssnc". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 15 11:29:57.347357 kubelet[2123]: I0715 11:29:57.347315 2123 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-9ssnc\" (UniqueName: \"kubernetes.io/projected/14076944-c5cd-4df9-b974-62eca0b75763-kube-api-access-9ssnc\") on node \"localhost\" DevicePath \"\"" Jul 15 11:29:57.347499 kubelet[2123]: I0715 11:29:57.347490 2123 reconciler_common.go:299] "Volume detached for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/14076944-c5cd-4df9-b974-62eca0b75763-whisker-backend-key-pair\") on node \"localhost\" DevicePath \"\"" Jul 15 11:29:57.347562 kubelet[2123]: I0715 11:29:57.347546 2123 reconciler_common.go:299] "Volume detached for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/14076944-c5cd-4df9-b974-62eca0b75763-whisker-ca-bundle\") on node \"localhost\" DevicePath \"\"" Jul 15 11:29:57.670000 audit[3503]: AVC avc: denied { write } for pid=3503 comm="tee" name="fd" dev="proc" ino=37450 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:29:57.670000 audit[3503]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffc77f167ed a2=241 a3=1b6 items=1 ppid=3462 pid=3503 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.670000 audit: CWD cwd="/etc/service/enabled/felix/log" Jul 15 11:29:57.670000 audit: PATH item=0 name="/dev/fd/63" inode=37436 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:57.670000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:29:57.680000 audit[3510]: AVC avc: denied { write } for pid=3510 comm="tee" name="fd" dev="proc" ino=37456 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:29:57.682000 audit[3508]: AVC avc: denied { write } for pid=3508 comm="tee" name="fd" dev="proc" ino=37462 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:29:57.682000 audit[3508]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fff20e8e7ed a2=241 a3=1b6 items=1 ppid=3448 pid=3508 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.682000 audit[3512]: AVC avc: denied { write } for pid=3512 comm="tee" name="fd" dev="proc" ino=37466 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:29:57.682000 audit[3512]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffeba1407de a2=241 a3=1b6 items=1 ppid=3449 pid=3512 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.682000 audit: CWD cwd="/etc/service/enabled/node-status-reporter/log" Jul 15 11:29:57.682000 audit: PATH item=0 name="/dev/fd/63" inode=36610 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:57.682000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:29:57.680000 audit[3510]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7fffabcee7ee a2=241 a3=1b6 items=1 ppid=3452 pid=3510 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.680000 audit: CWD cwd="/etc/service/enabled/bird/log" Jul 15 11:29:57.680000 audit: PATH item=0 name="/dev/fd/63" inode=36607 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:57.680000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:29:57.682000 audit: CWD cwd="/etc/service/enabled/bird6/log" Jul 15 11:29:57.682000 audit: PATH item=0 name="/dev/fd/63" inode=37445 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:57.682000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:29:57.690000 audit[3521]: AVC avc: denied { write } for pid=3521 comm="tee" name="fd" dev="proc" ino=37470 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:29:57.690000 audit[3521]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffedabba7dd a2=241 a3=1b6 items=1 ppid=3457 pid=3521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.690000 audit: CWD cwd="/etc/service/enabled/allocate-tunnel-addrs/log" Jul 15 11:29:57.690000 audit: PATH item=0 name="/dev/fd/63" inode=36615 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:57.690000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:29:57.703000 audit[3519]: AVC avc: denied { write } for pid=3519 comm="tee" name="fd" dev="proc" ino=37474 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:29:57.703000 audit[3519]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffd54cac7ed a2=241 a3=1b6 items=1 ppid=3460 pid=3519 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.703000 audit: CWD cwd="/etc/service/enabled/confd/log" Jul 15 11:29:57.703000 audit: PATH item=0 name="/dev/fd/63" inode=36614 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:57.703000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:29:57.718000 audit[3517]: AVC avc: denied { write } for pid=3517 comm="tee" name="fd" dev="proc" ino=36618 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=0 Jul 15 11:29:57.718000 audit[3517]: SYSCALL arch=c000003e syscall=257 success=yes exit=3 a0=ffffff9c a1=7ffceb8157ef a2=241 a3=1b6 items=1 ppid=3456 pid=3517 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="tee" exe="/usr/bin/coreutils" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.718000 audit: CWD cwd="/etc/service/enabled/cni/log" Jul 15 11:29:57.718000 audit: PATH item=0 name="/dev/fd/63" inode=36613 dev=00:0c mode=010600 ouid=0 ogid=0 rdev=00:00 obj=system_u:system_r:kernel_t:s0 nametype=NORMAL cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0 Jul 15 11:29:57.718000 audit: PROCTITLE proctitle=2F7573722F62696E2F636F72657574696C73002D2D636F72657574696C732D70726F672D73686562616E673D746565002F7573722F62696E2F746565002F6465762F66642F3633 Jul 15 11:29:57.752445 systemd[1]: Removed slice kubepods-besteffort-pod14076944_c5cd_4df9_b974_62eca0b75763.slice. Jul 15 11:29:57.869267 systemd[1]: var-lib-kubelet-pods-14076944\x2dc5cd\x2d4df9\x2db974\x2d62eca0b75763-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d9ssnc.mount: Deactivated successfully. Jul 15 11:29:57.941000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.941000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.941000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.941000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.941000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.941000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.941000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.941000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.941000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.941000 audit: BPF prog-id=139 op=LOAD Jul 15 11:29:57.941000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff040f5e90 a2=98 a3=1fffffffffffffff items=0 ppid=3463 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.941000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:29:57.942000 audit: BPF prog-id=139 op=UNLOAD Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit: BPF prog-id=140 op=LOAD Jul 15 11:29:57.944000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff040f5d70 a2=94 a3=3 items=0 ppid=3463 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.944000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:29:57.944000 audit: BPF prog-id=140 op=UNLOAD Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit[3557]: AVC avc: denied { bpf } for pid=3557 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.944000 audit: BPF prog-id=141 op=LOAD Jul 15 11:29:57.944000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff040f5db0 a2=94 a3=7fff040f5f90 items=0 ppid=3463 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.944000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:29:57.945000 audit: BPF prog-id=141 op=UNLOAD Jul 15 11:29:57.945000 audit[3557]: AVC avc: denied { perfmon } for pid=3557 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.945000 audit[3557]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=0 a1=7fff040f5e80 a2=50 a3=a000000085 items=0 ppid=3463 pid=3557 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.945000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F74632F676C6F62616C732F63616C695F63746C625F70726F677300747970650070726F675F6172726179006B657900340076616C7565003400656E74726965730033006E616D650063616C695F63746C625F70726F677300666C6167730030 Jul 15 11:29:57.947000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.947000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.947000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.947000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.947000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.947000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.947000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.947000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.947000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.947000 audit: BPF prog-id=142 op=LOAD Jul 15 11:29:57.947000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffce7035080 a2=98 a3=3 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.947000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:57.947000 audit: BPF prog-id=142 op=UNLOAD Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit: BPF prog-id=143 op=LOAD Jul 15 11:29:57.949000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffce7034e70 a2=94 a3=54428f items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.949000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:57.949000 audit: BPF prog-id=143 op=UNLOAD Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:57.949000 audit: BPF prog-id=144 op=LOAD Jul 15 11:29:57.949000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffce7034ea0 a2=94 a3=2 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:57.949000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:57.950000 audit: BPF prog-id=144 op=UNLOAD Jul 15 11:29:58.059273 systemd[1]: Created slice kubepods-besteffort-pod52363831_6670_48da_9f7f_9b08cc7d691c.slice. Jul 15 11:29:58.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.065000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.065000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.065000 audit: BPF prog-id=145 op=LOAD Jul 15 11:29:58.065000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7ffce7034d60 a2=94 a3=1 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.065000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.066000 audit: BPF prog-id=145 op=UNLOAD Jul 15 11:29:58.066000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.066000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7ffce7034e30 a2=50 a3=7ffce7034f10 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.066000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.074000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.074000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffce7034d70 a2=28 a3=0 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.074000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.074000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.074000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffce7034da0 a2=28 a3=0 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.074000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.074000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.074000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffce7034cb0 a2=28 a3=0 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.074000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.074000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.074000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffce7034dc0 a2=28 a3=0 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.074000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.074000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.074000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffce7034da0 a2=28 a3=0 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.074000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.074000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.074000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffce7034d90 a2=28 a3=0 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.074000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.074000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.074000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffce7034dc0 a2=28 a3=0 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.074000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffce7034da0 a2=28 a3=0 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.075000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffce7034dc0 a2=28 a3=0 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.075000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffce7034d90 a2=28 a3=0 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.075000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7ffce7034e00 a2=28 a3=0 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.075000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffce7034bb0 a2=50 a3=1 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.075000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.075000 audit: BPF prog-id=146 op=LOAD Jul 15 11:29:58.075000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffce7034bb0 a2=94 a3=5 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.075000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.076000 audit: BPF prog-id=146 op=UNLOAD Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7ffce7034c60 a2=50 a3=1 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.076000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7ffce7034d80 a2=4 a3=38 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.076000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { confidentiality } for pid=3558 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:29:58.076000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffce7034dd0 a2=94 a3=6 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.076000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { confidentiality } for pid=3558 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:29:58.076000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffce7034580 a2=94 a3=88 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.076000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { perfmon } for pid=3558 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { bpf } for pid=3558 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.076000 audit[3558]: AVC avc: denied { confidentiality } for pid=3558 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:29:58.076000 audit[3558]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7ffce7034580 a2=94 a3=88 items=0 ppid=3463 pid=3558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.076000 audit: PROCTITLE proctitle=627066746F6F6C006D6170006C697374002D2D6A736F6E Jul 15 11:29:58.089000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.089000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.089000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.089000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.089000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.089000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.089000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.089000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.089000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.089000 audit: BPF prog-id=147 op=LOAD Jul 15 11:29:58.089000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd209da400 a2=98 a3=1999999999999999 items=0 ppid=3463 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.089000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:29:58.090000 audit: BPF prog-id=147 op=UNLOAD Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit: BPF prog-id=148 op=LOAD Jul 15 11:29:58.090000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd209da2e0 a2=94 a3=ffff items=0 ppid=3463 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.090000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:29:58.090000 audit: BPF prog-id=148 op=UNLOAD Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { perfmon } for pid=3561 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit[3561]: AVC avc: denied { bpf } for pid=3561 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.090000 audit: BPF prog-id=149 op=LOAD Jul 15 11:29:58.090000 audit[3561]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffd209da320 a2=94 a3=7ffd209da500 items=0 ppid=3463 pid=3561 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.090000 audit: PROCTITLE proctitle=627066746F6F6C006D617000637265617465002F7379732F66732F6270662F63616C69636F2F63616C69636F5F6661696C736166655F706F7274735F763100747970650068617368006B657900340076616C7565003100656E7472696573003635353335006E616D650063616C69636F5F6661696C736166655F706F7274735F Jul 15 11:29:58.090000 audit: BPF prog-id=149 op=UNLOAD Jul 15 11:29:58.152277 kubelet[2123]: I0715 11:29:58.152184 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-86z9b\" (UniqueName: \"kubernetes.io/projected/52363831-6670-48da-9f7f-9b08cc7d691c-kube-api-access-86z9b\") pod \"whisker-5796ccbbd4-kcnvb\" (UID: \"52363831-6670-48da-9f7f-9b08cc7d691c\") " pod="calico-system/whisker-5796ccbbd4-kcnvb" Jul 15 11:29:58.152277 kubelet[2123]: I0715 11:29:58.152218 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-backend-key-pair\" (UniqueName: \"kubernetes.io/secret/52363831-6670-48da-9f7f-9b08cc7d691c-whisker-backend-key-pair\") pod \"whisker-5796ccbbd4-kcnvb\" (UID: \"52363831-6670-48da-9f7f-9b08cc7d691c\") " pod="calico-system/whisker-5796ccbbd4-kcnvb" Jul 15 11:29:58.152277 kubelet[2123]: I0715 11:29:58.152234 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"whisker-ca-bundle\" (UniqueName: \"kubernetes.io/configmap/52363831-6670-48da-9f7f-9b08cc7d691c-whisker-ca-bundle\") pod \"whisker-5796ccbbd4-kcnvb\" (UID: \"52363831-6670-48da-9f7f-9b08cc7d691c\") " pod="calico-system/whisker-5796ccbbd4-kcnvb" Jul 15 11:29:58.168633 systemd-networkd[1057]: vxlan.calico: Link UP Jul 15 11:29:58.168637 systemd-networkd[1057]: vxlan.calico: Gained carrier Jul 15 11:29:58.188000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.188000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.188000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.188000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.188000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.188000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.188000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.188000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.188000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.188000 audit: BPF prog-id=150 op=LOAD Jul 15 11:29:58.188000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc36014c60 a2=98 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.188000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.188000 audit: BPF prog-id=150 op=UNLOAD Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit: BPF prog-id=151 op=LOAD Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc36014a70 a2=94 a3=54428f items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit: BPF prog-id=151 op=UNLOAD Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit: BPF prog-id=152 op=LOAD Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7ffc36014aa0 a2=94 a3=2 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit: BPF prog-id=152 op=UNLOAD Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc36014970 a2=28 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc360149a0 a2=28 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc360148b0 a2=28 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc360149c0 a2=28 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc360149a0 a2=28 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc36014990 a2=28 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc360149c0 a2=28 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc360149a0 a2=28 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc360149c0 a2=28 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7ffc36014990 a2=28 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=12 a1=7ffc36014a00 a2=28 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit: BPF prog-id=153 op=LOAD Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc36014870 a2=94 a3=0 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit: BPF prog-id=153 op=UNLOAD Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=0 a1=7ffc36014860 a2=50 a3=2800 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=0 a1=7ffc36014860 a2=50 a3=2800 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit: BPF prog-id=154 op=LOAD Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc36014080 a2=94 a3=2 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.196000 audit: BPF prog-id=154 op=UNLOAD Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { perfmon } for pid=3586 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit[3586]: AVC avc: denied { bpf } for pid=3586 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.196000 audit: BPF prog-id=155 op=LOAD Jul 15 11:29:58.196000 audit[3586]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7ffc36014180 a2=94 a3=30 items=0 ppid=3463 pid=3586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.196000 audit: PROCTITLE proctitle=627066746F6F6C0070726F67006C6F6164002F7573722F6C69622F63616C69636F2F6270662F66696C7465722E6F002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41007479706500786470 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit: BPF prog-id=156 op=LOAD Jul 15 11:29:58.203000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=3 a0=5 a1=7fff1e6e8820 a2=98 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.203000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.203000 audit: BPF prog-id=156 op=UNLOAD Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit: BPF prog-id=157 op=LOAD Jul 15 11:29:58.203000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff1e6e8610 a2=94 a3=54428f items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.203000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.203000 audit: BPF prog-id=157 op=UNLOAD Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.203000 audit: BPF prog-id=158 op=LOAD Jul 15 11:29:58.203000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff1e6e8640 a2=94 a3=2 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.203000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.203000 audit: BPF prog-id=158 op=UNLOAD Jul 15 11:29:58.307000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.307000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.307000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.307000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.307000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.307000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.307000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.307000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.307000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.307000 audit: BPF prog-id=159 op=LOAD Jul 15 11:29:58.307000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=5 a1=7fff1e6e8500 a2=94 a3=1 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.307000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.307000 audit: BPF prog-id=159 op=UNLOAD Jul 15 11:29:58.307000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.307000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=0 a1=7fff1e6e85d0 a2=50 a3=7fff1e6e86b0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.307000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.315000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.315000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff1e6e8510 a2=28 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.315000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.315000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.315000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff1e6e8540 a2=28 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.315000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff1e6e8450 a2=28 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff1e6e8560 a2=28 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff1e6e8540 a2=28 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff1e6e8530 a2=28 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff1e6e8560 a2=28 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff1e6e8540 a2=28 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff1e6e8560 a2=28 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=12 a1=7fff1e6e8530 a2=28 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=4 a0=12 a1=7fff1e6e85a0 a2=28 a3=0 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff1e6e8350 a2=50 a3=1 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit: BPF prog-id=160 op=LOAD Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=6 a0=5 a1=7fff1e6e8350 a2=94 a3=5 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit: BPF prog-id=160 op=UNLOAD Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=5 a0=0 a1=7fff1e6e8400 a2=50 a3=1 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=16 a1=7fff1e6e8520 a2=4 a3=38 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.316000 audit[3591]: AVC avc: denied { confidentiality } for pid=3591 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:29:58.316000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff1e6e8570 a2=94 a3=6 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.316000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { confidentiality } for pid=3591 comm="bpftool" lockdown_reason="use of bpf to read kernel RAM" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=lockdown permissive=0 Jul 15 11:29:58.317000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff1e6e7d20 a2=94 a3=88 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.317000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: AVC avc: denied { perfmon } for pid=3591 comm="bpftool" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.317000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=no exit=-22 a0=5 a1=7fff1e6e7d20 a2=94 a3=88 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.317000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.318000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.318000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff1e6e9750 a2=10 a3=f8f00800 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.318000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.318000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.318000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff1e6e95f0 a2=10 a3=3 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.318000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.318000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.318000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff1e6e9590 a2=10 a3=3 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.318000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.318000 audit[3591]: AVC avc: denied { bpf } for pid=3591 comm="bpftool" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.318000 audit[3591]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=7fff1e6e9590 a2=10 a3=7 items=0 ppid=3463 pid=3591 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="bpftool" exe="/usr/bin/bpftool" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.318000 audit: PROCTITLE proctitle=627066746F6F6C002D2D6A736F6E002D2D7072657474790070726F670073686F770070696E6E6564002F7379732F66732F6270662F63616C69636F2F7864702F70726566696C7465725F76315F63616C69636F5F746D705F41 Jul 15 11:29:58.329000 audit: BPF prog-id=155 op=UNLOAD Jul 15 11:29:58.380889 env[1251]: time="2025-07-15T11:29:58.380610396Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5796ccbbd4-kcnvb,Uid:52363831-6670-48da-9f7f-9b08cc7d691c,Namespace:calico-system,Attempt:0,}" Jul 15 11:29:58.486000 audit[3645]: NETFILTER_CFG table=mangle:101 family=2 entries=16 op=nft_register_chain pid=3645 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:29:58.486000 audit[3645]: SYSCALL arch=c000003e syscall=46 success=yes exit=6868 a0=3 a1=7ffe9bdf0530 a2=0 a3=7ffe9bdf051c items=0 ppid=3463 pid=3645 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.486000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:29:58.500000 audit[3639]: NETFILTER_CFG table=nat:102 family=2 entries=15 op=nft_register_chain pid=3639 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:29:58.500000 audit[3639]: SYSCALL arch=c000003e syscall=46 success=yes exit=5084 a0=3 a1=7ffc3aed6a10 a2=0 a3=7ffc3aed69fc items=0 ppid=3463 pid=3639 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.500000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:29:58.510000 audit[3646]: NETFILTER_CFG table=filter:103 family=2 entries=39 op=nft_register_chain pid=3646 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:29:58.510000 audit[3646]: SYSCALL arch=c000003e syscall=46 success=yes exit=18968 a0=3 a1=7ffe82e6ff10 a2=0 a3=7ffe82e6fefc items=0 ppid=3463 pid=3646 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.510000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:29:58.518000 audit[3637]: NETFILTER_CFG table=raw:104 family=2 entries=21 op=nft_register_chain pid=3637 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:29:58.518000 audit[3637]: SYSCALL arch=c000003e syscall=46 success=yes exit=8452 a0=3 a1=7ffd188e5dd0 a2=0 a3=7ffd188e5dbc items=0 ppid=3463 pid=3637 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.518000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:29:58.572863 systemd-networkd[1057]: calided884ada58: Link UP Jul 15 11:29:58.574524 systemd-networkd[1057]: calided884ada58: Gained carrier Jul 15 11:29:58.575339 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calided884ada58: link becomes ready Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.452 [INFO][3617] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0 whisker-5796ccbbd4- calico-system 52363831-6670-48da-9f7f-9b08cc7d691c 925 0 2025-07-15 11:29:57 +0000 UTC map[app.kubernetes.io/name:whisker k8s-app:whisker pod-template-hash:5796ccbbd4 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:whisker] map[] [] [] []} {k8s localhost whisker-5796ccbbd4-kcnvb eth0 whisker [] [] [kns.calico-system ksa.calico-system.whisker] calided884ada58 [] [] }} ContainerID="090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" Namespace="calico-system" Pod="whisker-5796ccbbd4-kcnvb" WorkloadEndpoint="localhost-k8s-whisker--5796ccbbd4--kcnvb-" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.452 [INFO][3617] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" Namespace="calico-system" Pod="whisker-5796ccbbd4-kcnvb" WorkloadEndpoint="localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.499 [INFO][3641] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" HandleID="k8s-pod-network.090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" Workload="localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.499 [INFO][3641] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" HandleID="k8s-pod-network.090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" Workload="localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002d5640), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"whisker-5796ccbbd4-kcnvb", "timestamp":"2025-07-15 11:29:58.499714918 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.499 [INFO][3641] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.499 [INFO][3641] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.499 [INFO][3641] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.525 [INFO][3641] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" host="localhost" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.537 [INFO][3641] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.541 [INFO][3641] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.543 [INFO][3641] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.545 [INFO][3641] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.545 [INFO][3641] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" host="localhost" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.546 [INFO][3641] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3 Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.549 [INFO][3641] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" host="localhost" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.552 [INFO][3641] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.129/26] block=192.168.88.128/26 handle="k8s-pod-network.090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" host="localhost" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.552 [INFO][3641] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.129/26] handle="k8s-pod-network.090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" host="localhost" Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.552 [INFO][3641] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:29:58.595003 env[1251]: 2025-07-15 11:29:58.552 [INFO][3641] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.129/26] IPv6=[] ContainerID="090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" HandleID="k8s-pod-network.090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" Workload="localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0" Jul 15 11:29:58.595758 env[1251]: 2025-07-15 11:29:58.554 [INFO][3617] cni-plugin/k8s.go 418: Populated endpoint ContainerID="090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" Namespace="calico-system" Pod="whisker-5796ccbbd4-kcnvb" WorkloadEndpoint="localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0", GenerateName:"whisker-5796ccbbd4-", Namespace:"calico-system", SelfLink:"", UID:"52363831-6670-48da-9f7f-9b08cc7d691c", ResourceVersion:"925", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5796ccbbd4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"whisker-5796ccbbd4-kcnvb", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calided884ada58", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:29:58.595758 env[1251]: 2025-07-15 11:29:58.555 [INFO][3617] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.129/32] ContainerID="090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" Namespace="calico-system" Pod="whisker-5796ccbbd4-kcnvb" WorkloadEndpoint="localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0" Jul 15 11:29:58.595758 env[1251]: 2025-07-15 11:29:58.555 [INFO][3617] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calided884ada58 ContainerID="090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" Namespace="calico-system" Pod="whisker-5796ccbbd4-kcnvb" WorkloadEndpoint="localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0" Jul 15 11:29:58.595758 env[1251]: 2025-07-15 11:29:58.578 [INFO][3617] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" Namespace="calico-system" Pod="whisker-5796ccbbd4-kcnvb" WorkloadEndpoint="localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0" Jul 15 11:29:58.595758 env[1251]: 2025-07-15 11:29:58.578 [INFO][3617] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" Namespace="calico-system" Pod="whisker-5796ccbbd4-kcnvb" WorkloadEndpoint="localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0", GenerateName:"whisker-5796ccbbd4-", Namespace:"calico-system", SelfLink:"", UID:"52363831-6670-48da-9f7f-9b08cc7d691c", ResourceVersion:"925", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 57, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"whisker", "k8s-app":"whisker", "pod-template-hash":"5796ccbbd4", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"whisker"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3", Pod:"whisker-5796ccbbd4-kcnvb", Endpoint:"eth0", ServiceAccountName:"whisker", IPNetworks:[]string{"192.168.88.129/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.whisker"}, InterfaceName:"calided884ada58", MAC:"1a:f5:bf:11:aa:04", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:29:58.595758 env[1251]: 2025-07-15 11:29:58.592 [INFO][3617] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3" Namespace="calico-system" Pod="whisker-5796ccbbd4-kcnvb" WorkloadEndpoint="localhost-k8s-whisker--5796ccbbd4--kcnvb-eth0" Jul 15 11:29:58.619610 env[1251]: time="2025-07-15T11:29:58.619555606Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:29:58.621026 env[1251]: time="2025-07-15T11:29:58.620993277Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:29:58.621089 env[1251]: time="2025-07-15T11:29:58.621030410Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:29:58.621616 env[1251]: time="2025-07-15T11:29:58.621374327Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3 pid=3676 runtime=io.containerd.runc.v2 Jul 15 11:29:58.615000 audit[3666]: NETFILTER_CFG table=filter:105 family=2 entries=59 op=nft_register_chain pid=3666 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:29:58.615000 audit[3666]: SYSCALL arch=c000003e syscall=46 success=yes exit=35860 a0=3 a1=7ffcb029dec0 a2=0 a3=7ffcb029deac items=0 ppid=3463 pid=3666 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.615000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:29:58.635704 systemd[1]: Started cri-containerd-090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3.scope. Jul 15 11:29:58.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit: BPF prog-id=161 op=LOAD Jul 15 11:29:58.646000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit[3686]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3676 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039303236386331303437356361306263356433663163383861363136 Jul 15 11:29:58.646000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.646000 audit[3686]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=3676 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.646000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039303236386331303437356361306263356433663163383861363136 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit: BPF prog-id=162 op=LOAD Jul 15 11:29:58.647000 audit[3686]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c00022a350 items=0 ppid=3676 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039303236386331303437356361306263356433663163383861363136 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit: BPF prog-id=163 op=LOAD Jul 15 11:29:58.647000 audit[3686]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c00022a398 items=0 ppid=3676 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039303236386331303437356361306263356433663163383861363136 Jul 15 11:29:58.647000 audit: BPF prog-id=163 op=UNLOAD Jul 15 11:29:58.647000 audit: BPF prog-id=162 op=UNLOAD Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { perfmon } for pid=3686 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit[3686]: AVC avc: denied { bpf } for pid=3686 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:29:58.647000 audit: BPF prog-id=164 op=LOAD Jul 15 11:29:58.647000 audit[3686]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00022a7a8 items=0 ppid=3676 pid=3686 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:29:58.647000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3039303236386331303437356361306263356433663163383861363136 Jul 15 11:29:58.648119 systemd-resolved[1204]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:29:58.673508 env[1251]: time="2025-07-15T11:29:58.673477445Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:whisker-5796ccbbd4-kcnvb,Uid:52363831-6670-48da-9f7f-9b08cc7d691c,Namespace:calico-system,Attempt:0,} returns sandbox id \"090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3\"" Jul 15 11:29:58.698163 env[1251]: time="2025-07-15T11:29:58.698131817Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\"" Jul 15 11:29:59.485436 systemd-networkd[1057]: vxlan.calico: Gained IPv6LL Jul 15 11:29:59.732957 env[1251]: time="2025-07-15T11:29:59.732929216Z" level=info msg="StopPodSandbox for \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\"" Jul 15 11:29:59.738384 kubelet[2123]: I0715 11:29:59.738272 2123 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="14076944-c5cd-4df9-b974-62eca0b75763" path="/var/lib/kubelet/pods/14076944-c5cd-4df9-b974-62eca0b75763/volumes" Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.805 [INFO][3727] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.805 [INFO][3727] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" iface="eth0" netns="/var/run/netns/cni-2e5cee80-70b9-7039-f4d9-0cf8ca045bbd" Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.807 [INFO][3727] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" iface="eth0" netns="/var/run/netns/cni-2e5cee80-70b9-7039-f4d9-0cf8ca045bbd" Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.807 [INFO][3727] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" iface="eth0" netns="/var/run/netns/cni-2e5cee80-70b9-7039-f4d9-0cf8ca045bbd" Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.807 [INFO][3727] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.807 [INFO][3727] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.837 [INFO][3735] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" HandleID="k8s-pod-network.40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.837 [INFO][3735] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.837 [INFO][3735] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.842 [WARNING][3735] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" HandleID="k8s-pod-network.40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.842 [INFO][3735] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" HandleID="k8s-pod-network.40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.845 [INFO][3735] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:29:59.848917 env[1251]: 2025-07-15 11:29:59.847 [INFO][3727] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:29:59.850923 systemd[1]: run-netns-cni\x2d2e5cee80\x2d70b9\x2d7039\x2df4d9\x2d0cf8ca045bbd.mount: Deactivated successfully. Jul 15 11:29:59.851640 env[1251]: time="2025-07-15T11:29:59.851618023Z" level=info msg="TearDown network for sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\" successfully" Jul 15 11:29:59.851697 env[1251]: time="2025-07-15T11:29:59.851685118Z" level=info msg="StopPodSandbox for \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\" returns successfully" Jul 15 11:29:59.852270 env[1251]: time="2025-07-15T11:29:59.852250238Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6db74f8486-2rx6m,Uid:864a889c-657c-4971-80d3-beba352cc850,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:29:59.968380 systemd-networkd[1057]: calib8d3a053426: Link UP Jul 15 11:29:59.969113 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:29:59.969555 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calib8d3a053426: link becomes ready Jul 15 11:29:59.969458 systemd-networkd[1057]: calib8d3a053426: Gained carrier Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.910 [INFO][3741] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0 calico-apiserver-6db74f8486- calico-apiserver 864a889c-657c-4971-80d3-beba352cc850 935 0 2025-07-15 11:29:31 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6db74f8486 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6db74f8486-2rx6m eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calib8d3a053426 [] [] }} ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-2rx6m" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.910 [INFO][3741] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-2rx6m" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.938 [INFO][3755] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" HandleID="k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.938 [INFO][3755] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" HandleID="k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000251610), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6db74f8486-2rx6m", "timestamp":"2025-07-15 11:29:59.938706339 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.938 [INFO][3755] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.938 [INFO][3755] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.938 [INFO][3755] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.943 [INFO][3755] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" host="localhost" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.945 [INFO][3755] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.948 [INFO][3755] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.948 [INFO][3755] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.949 [INFO][3755] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.949 [INFO][3755] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" host="localhost" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.950 [INFO][3755] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.956 [INFO][3755] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" host="localhost" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.960 [INFO][3755] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.130/26] block=192.168.88.128/26 handle="k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" host="localhost" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.960 [INFO][3755] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.130/26] handle="k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" host="localhost" Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.960 [INFO][3755] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:29:59.982695 env[1251]: 2025-07-15 11:29:59.960 [INFO][3755] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.130/26] IPv6=[] ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" HandleID="k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:29:59.983720 env[1251]: 2025-07-15 11:29:59.963 [INFO][3741] cni-plugin/k8s.go 418: Populated endpoint ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-2rx6m" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0", GenerateName:"calico-apiserver-6db74f8486-", Namespace:"calico-apiserver", SelfLink:"", UID:"864a889c-657c-4971-80d3-beba352cc850", ResourceVersion:"935", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6db74f8486", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6db74f8486-2rx6m", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib8d3a053426", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:29:59.983720 env[1251]: 2025-07-15 11:29:59.963 [INFO][3741] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.130/32] ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-2rx6m" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:29:59.983720 env[1251]: 2025-07-15 11:29:59.963 [INFO][3741] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calib8d3a053426 ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-2rx6m" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:29:59.983720 env[1251]: 2025-07-15 11:29:59.970 [INFO][3741] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-2rx6m" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:29:59.983720 env[1251]: 2025-07-15 11:29:59.970 [INFO][3741] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-2rx6m" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0", GenerateName:"calico-apiserver-6db74f8486-", Namespace:"calico-apiserver", SelfLink:"", UID:"864a889c-657c-4971-80d3-beba352cc850", ResourceVersion:"935", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6db74f8486", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab", Pod:"calico-apiserver-6db74f8486-2rx6m", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib8d3a053426", MAC:"e2:72:0b:e2:fd:9d", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:29:59.983720 env[1251]: 2025-07-15 11:29:59.978 [INFO][3741] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-2rx6m" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:30:00.012467 env[1251]: time="2025-07-15T11:30:00.012406354Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:00.012467 env[1251]: time="2025-07-15T11:30:00.012441930Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:00.012620 env[1251]: time="2025-07-15T11:30:00.012449041Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:00.012853 env[1251]: time="2025-07-15T11:30:00.012768047Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab pid=3777 runtime=io.containerd.runc.v2 Jul 15 11:30:00.023944 systemd[1]: Started cri-containerd-152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab.scope. Jul 15 11:30:00.023000 audit[3789]: NETFILTER_CFG table=filter:106 family=2 entries=50 op=nft_register_chain pid=3789 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:00.023000 audit[3789]: SYSCALL arch=c000003e syscall=46 success=yes exit=28208 a0=3 a1=7ffe5db3cbf0 a2=0 a3=7ffe5db3cbdc items=0 ppid=3463 pid=3789 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.023000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:00.029471 env[1251]: time="2025-07-15T11:30:00.028471781Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:00.038011 env[1251]: time="2025-07-15T11:30:00.037986659Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:00.039083 env[1251]: time="2025-07-15T11:30:00.039061155Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:00.039972 env[1251]: time="2025-07-15T11:30:00.039907727Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker@sha256:31346d4524252a3b0d2a1d289c4985b8402b498b5ce82a12e682096ab7446678,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:00.040099 env[1251]: time="2025-07-15T11:30:00.040081659Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker:v3.30.2\" returns image reference \"sha256:eb8f512acf9402730da120a7b0d47d3d9d451b56e6e5eb8bad53ab24f926f954\"" Jul 15 11:30:00.047381 env[1251]: time="2025-07-15T11:30:00.045600437Z" level=info msg="CreateContainer within sandbox \"090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3\" for container &ContainerMetadata{Name:whisker,Attempt:0,}" Jul 15 11:30:00.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050998 kernel: kauditd_printk_skb: 659 callbacks suppressed Jul 15 11:30:00.051037 kernel: audit: type=1400 audit(1752579000.049:1152): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.053664 kernel: audit: type=1400 audit(1752579000.049:1153): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.058784 kernel: audit: type=1400 audit(1752579000.049:1154): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.058819 kernel: audit: type=1400 audit(1752579000.049:1155): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.064351 kernel: audit: type=1400 audit(1752579000.049:1156): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.064363 systemd-networkd[1057]: calided884ada58: Gained IPv6LL Jul 15 11:30:00.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.068676 systemd-resolved[1204]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:30:00.070907 kernel: audit: type=1400 audit(1752579000.049:1157): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.070956 kernel: audit: type=1400 audit(1752579000.049:1158): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.049000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.073844 kernel: audit: type=1400 audit(1752579000.049:1159): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.079428 kernel: audit: type=1400 audit(1752579000.049:1160): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.079452 kernel: audit: type=1400 audit(1752579000.049:1161): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.049000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.049000 audit: BPF prog-id=165 op=LOAD Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit[3787]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=3777 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135326231653837613764393234386365663562316165373864303361 Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit[3787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=3777 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135326231653837613764393234386365663562316165373864303361 Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.050000 audit: BPF prog-id=166 op=LOAD Jul 15 11:30:00.050000 audit[3787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0002243d0 items=0 ppid=3777 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.050000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135326231653837613764393234386365663562316165373864303361 Jul 15 11:30:00.053000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.053000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.053000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.053000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.053000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.053000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.053000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.053000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.053000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.053000 audit: BPF prog-id=167 op=LOAD Jul 15 11:30:00.053000 audit[3787]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c000224418 items=0 ppid=3777 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.053000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135326231653837613764393234386365663562316165373864303361 Jul 15 11:30:00.061000 audit: BPF prog-id=167 op=UNLOAD Jul 15 11:30:00.061000 audit: BPF prog-id=166 op=UNLOAD Jul 15 11:30:00.061000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.061000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.061000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.061000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.061000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.061000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.061000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.061000 audit[3787]: AVC avc: denied { perfmon } for pid=3787 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.061000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.061000 audit[3787]: AVC avc: denied { bpf } for pid=3787 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.061000 audit: BPF prog-id=168 op=LOAD Jul 15 11:30:00.061000 audit[3787]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c000224828 items=0 ppid=3777 pid=3787 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.061000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3135326231653837613764393234386365663562316165373864303361 Jul 15 11:30:00.098783 env[1251]: time="2025-07-15T11:30:00.096158196Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6db74f8486-2rx6m,Uid:864a889c-657c-4971-80d3-beba352cc850,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab\"" Jul 15 11:30:00.098783 env[1251]: time="2025-07-15T11:30:00.097170820Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:30:00.102956 env[1251]: time="2025-07-15T11:30:00.102933048Z" level=info msg="CreateContainer within sandbox \"090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3\" for &ContainerMetadata{Name:whisker,Attempt:0,} returns container id \"0526579f36876aa43f63091785929aa9520fb37c7742e51bc1893590df3b55aa\"" Jul 15 11:30:00.103226 env[1251]: time="2025-07-15T11:30:00.103212612Z" level=info msg="StartContainer for \"0526579f36876aa43f63091785929aa9520fb37c7742e51bc1893590df3b55aa\"" Jul 15 11:30:00.114938 systemd[1]: Started cri-containerd-0526579f36876aa43f63091785929aa9520fb37c7742e51bc1893590df3b55aa.scope. Jul 15 11:30:00.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit: BPF prog-id=169 op=LOAD Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3676 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035323635373966333638373661613433663633303931373835393239 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=3676 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035323635373966333638373661613433663633303931373835393239 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit: BPF prog-id=170 op=LOAD Jul 15 11:30:00.126000 audit[3819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000025a40 items=0 ppid=3676 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035323635373966333638373661613433663633303931373835393239 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit: BPF prog-id=171 op=LOAD Jul 15 11:30:00.126000 audit[3819]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000025a88 items=0 ppid=3676 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035323635373966333638373661613433663633303931373835393239 Jul 15 11:30:00.126000 audit: BPF prog-id=171 op=UNLOAD Jul 15 11:30:00.126000 audit: BPF prog-id=170 op=UNLOAD Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { perfmon } for pid=3819 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit[3819]: AVC avc: denied { bpf } for pid=3819 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:00.126000 audit: BPF prog-id=172 op=LOAD Jul 15 11:30:00.126000 audit[3819]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000025e98 items=0 ppid=3676 pid=3819 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.126000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035323635373966333638373661613433663633303931373835393239 Jul 15 11:30:00.179040 env[1251]: time="2025-07-15T11:30:00.179013158Z" level=info msg="StartContainer for \"0526579f36876aa43f63091785929aa9520fb37c7742e51bc1893590df3b55aa\" returns successfully" Jul 15 11:30:00.234000 audit[3829]: AVC avc: denied { search } for pid=3829 comm="nginx" name="crypto" dev="proc" ino=39605 scontext=system_u:system_r:svirt_lxc_net_t:s0:c210,c630 tcontext=system_u:object_r:sysctl_crypto_t:s0 tclass=dir permissive=0 Jul 15 11:30:00.234000 audit[3829]: SYSCALL arch=c000003e syscall=257 success=no exit=-13 a0=ffffff9c a1=7f958b786728 a2=0 a3=0 items=0 ppid=3676 pid=3829 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="nginx" exe="/usr/sbin/nginx" subj=system_u:system_r:svirt_lxc_net_t:s0:c210,c630 key=(null) Jul 15 11:30:00.234000 audit: PROCTITLE proctitle=2F7573722F7362696E2F6E67696E78002D67006461656D6F6E206F66663B Jul 15 11:30:00.733454 env[1251]: time="2025-07-15T11:30:00.733308428Z" level=info msg="StopPodSandbox for \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\"" Jul 15 11:30:00.733690 env[1251]: time="2025-07-15T11:30:00.733391197Z" level=info msg="StopPodSandbox for \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\"" Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.785 [INFO][3870] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.785 [INFO][3870] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" iface="eth0" netns="/var/run/netns/cni-0c58993a-75d4-54f5-6143-3407f4c33b0e" Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.785 [INFO][3870] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" iface="eth0" netns="/var/run/netns/cni-0c58993a-75d4-54f5-6143-3407f4c33b0e" Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.785 [INFO][3870] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" iface="eth0" netns="/var/run/netns/cni-0c58993a-75d4-54f5-6143-3407f4c33b0e" Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.785 [INFO][3870] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.785 [INFO][3870] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.812 [INFO][3882] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" HandleID="k8s-pod-network.53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.812 [INFO][3882] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.812 [INFO][3882] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.817 [WARNING][3882] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" HandleID="k8s-pod-network.53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.817 [INFO][3882] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" HandleID="k8s-pod-network.53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.818 [INFO][3882] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:00.823206 env[1251]: 2025-07-15 11:30:00.821 [INFO][3870] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:30:00.824001 env[1251]: time="2025-07-15T11:30:00.823338696Z" level=info msg="TearDown network for sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\" successfully" Jul 15 11:30:00.824001 env[1251]: time="2025-07-15T11:30:00.823361395Z" level=info msg="StopPodSandbox for \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\" returns successfully" Jul 15 11:30:00.824001 env[1251]: time="2025-07-15T11:30:00.823826946Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bdpgt,Uid:b065a6c7-4fee-4858-b630-917bce34c00e,Namespace:calico-system,Attempt:1,}" Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.794 [INFO][3869] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.794 [INFO][3869] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" iface="eth0" netns="/var/run/netns/cni-0c0fa1dd-8d22-1657-444c-a9d5b36a2977" Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.795 [INFO][3869] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" iface="eth0" netns="/var/run/netns/cni-0c0fa1dd-8d22-1657-444c-a9d5b36a2977" Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.795 [INFO][3869] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" iface="eth0" netns="/var/run/netns/cni-0c0fa1dd-8d22-1657-444c-a9d5b36a2977" Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.795 [INFO][3869] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.795 [INFO][3869] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.837 [INFO][3887] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" HandleID="k8s-pod-network.72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.837 [INFO][3887] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.837 [INFO][3887] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.842 [WARNING][3887] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" HandleID="k8s-pod-network.72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.842 [INFO][3887] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" HandleID="k8s-pod-network.72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.844 [INFO][3887] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:00.846792 env[1251]: 2025-07-15 11:30:00.845 [INFO][3869] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:30:00.847911 env[1251]: time="2025-07-15T11:30:00.846921014Z" level=info msg="TearDown network for sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\" successfully" Jul 15 11:30:00.847911 env[1251]: time="2025-07-15T11:30:00.846941315Z" level=info msg="StopPodSandbox for \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\" returns successfully" Jul 15 11:30:00.847911 env[1251]: time="2025-07-15T11:30:00.847437304Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-klb5s,Uid:c330bef8-f79b-4274-a807-a934b3cc71d4,Namespace:kube-system,Attempt:1,}" Jul 15 11:30:00.879216 systemd[1]: run-netns-cni\x2d0c58993a\x2d75d4\x2d54f5\x2d6143\x2d3407f4c33b0e.mount: Deactivated successfully. Jul 15 11:30:00.879276 systemd[1]: run-netns-cni\x2d0c0fa1dd\x2d8d22\x2d1657\x2d444c\x2da9d5b36a2977.mount: Deactivated successfully. Jul 15 11:30:00.951177 systemd-networkd[1057]: cali7529d19453e: Link UP Jul 15 11:30:00.953108 systemd-networkd[1057]: cali7529d19453e: Gained carrier Jul 15 11:30:00.953356 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali7529d19453e: link becomes ready Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.875 [INFO][3895] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-csi--node--driver--bdpgt-eth0 csi-node-driver- calico-system b065a6c7-4fee-4858-b630-917bce34c00e 948 0 2025-07-15 11:29:35 +0000 UTC map[app.kubernetes.io/name:csi-node-driver controller-revision-hash:8967bcb6f k8s-app:csi-node-driver name:csi-node-driver pod-template-generation:1 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:csi-node-driver] map[] [] [] []} {k8s localhost csi-node-driver-bdpgt eth0 csi-node-driver [] [] [kns.calico-system ksa.calico-system.csi-node-driver] cali7529d19453e [] [] }} ContainerID="f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" Namespace="calico-system" Pod="csi-node-driver-bdpgt" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdpgt-" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.875 [INFO][3895] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" Namespace="calico-system" Pod="csi-node-driver-bdpgt" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.921 [INFO][3919] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" HandleID="k8s-pod-network.f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.921 [INFO][3919] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" HandleID="k8s-pod-network.f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd600), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"csi-node-driver-bdpgt", "timestamp":"2025-07-15 11:30:00.921026357 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.921 [INFO][3919] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.921 [INFO][3919] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.921 [INFO][3919] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.926 [INFO][3919] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" host="localhost" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.929 [INFO][3919] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.932 [INFO][3919] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.933 [INFO][3919] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.934 [INFO][3919] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.934 [INFO][3919] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" host="localhost" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.935 [INFO][3919] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.941 [INFO][3919] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" host="localhost" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.946 [INFO][3919] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.131/26] block=192.168.88.128/26 handle="k8s-pod-network.f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" host="localhost" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.947 [INFO][3919] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.131/26] handle="k8s-pod-network.f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" host="localhost" Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.947 [INFO][3919] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:00.969139 env[1251]: 2025-07-15 11:30:00.947 [INFO][3919] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.131/26] IPv6=[] ContainerID="f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" HandleID="k8s-pod-network.f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:30:00.974877 env[1251]: 2025-07-15 11:30:00.948 [INFO][3895] cni-plugin/k8s.go 418: Populated endpoint ContainerID="f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" Namespace="calico-system" Pod="csi-node-driver-bdpgt" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdpgt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bdpgt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b065a6c7-4fee-4858-b630-917bce34c00e", ResourceVersion:"948", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"csi-node-driver-bdpgt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7529d19453e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:00.974877 env[1251]: 2025-07-15 11:30:00.948 [INFO][3895] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.131/32] ContainerID="f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" Namespace="calico-system" Pod="csi-node-driver-bdpgt" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:30:00.974877 env[1251]: 2025-07-15 11:30:00.948 [INFO][3895] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali7529d19453e ContainerID="f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" Namespace="calico-system" Pod="csi-node-driver-bdpgt" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:30:00.974877 env[1251]: 2025-07-15 11:30:00.953 [INFO][3895] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" Namespace="calico-system" Pod="csi-node-driver-bdpgt" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:30:00.974877 env[1251]: 2025-07-15 11:30:00.953 [INFO][3895] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" Namespace="calico-system" Pod="csi-node-driver-bdpgt" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdpgt-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bdpgt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b065a6c7-4fee-4858-b630-917bce34c00e", ResourceVersion:"948", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe", Pod:"csi-node-driver-bdpgt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7529d19453e", MAC:"8e:8f:63:78:ff:01", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:00.974877 env[1251]: 2025-07-15 11:30:00.966 [INFO][3895] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe" Namespace="calico-system" Pod="csi-node-driver-bdpgt" WorkloadEndpoint="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:30:00.985000 audit[3951]: NETFILTER_CFG table=filter:107 family=2 entries=40 op=nft_register_chain pid=3951 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:00.985000 audit[3951]: SYSCALL arch=c000003e syscall=46 success=yes exit=20764 a0=3 a1=7ffc9c814f90 a2=0 a3=7ffc9c814f7c items=0 ppid=3463 pid=3951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:00.985000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:00.989967 env[1251]: time="2025-07-15T11:30:00.988895667Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:00.989967 env[1251]: time="2025-07-15T11:30:00.988963918Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:00.989967 env[1251]: time="2025-07-15T11:30:00.988985911Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:00.989967 env[1251]: time="2025-07-15T11:30:00.989096110Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe pid=3950 runtime=io.containerd.runc.v2 Jul 15 11:30:01.011331 systemd[1]: run-containerd-runc-k8s.io-f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe-runc.g3j1jQ.mount: Deactivated successfully. Jul 15 11:30:01.014308 systemd[1]: Started cri-containerd-f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe.scope. Jul 15 11:30:01.022437 systemd-networkd[1057]: calib8d3a053426: Gained IPv6LL Jul 15 11:30:01.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.024000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.024000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit: BPF prog-id=173 op=LOAD Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=3950 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630356334643338663735346362623663346134376439656662373463 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=c items=0 ppid=3950 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630356334643338663735346362623663346134376439656662373463 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit: BPF prog-id=174 op=LOAD Jul 15 11:30:01.025000 audit[3959]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000313250 items=0 ppid=3950 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630356334643338663735346362623663346134376439656662373463 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.025000 audit: BPF prog-id=175 op=LOAD Jul 15 11:30:01.025000 audit[3959]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c000313298 items=0 ppid=3950 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.025000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630356334643338663735346362623663346134376439656662373463 Jul 15 11:30:01.026000 audit: BPF prog-id=175 op=UNLOAD Jul 15 11:30:01.026000 audit: BPF prog-id=174 op=UNLOAD Jul 15 11:30:01.026000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.026000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.026000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.026000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.026000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.026000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.026000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.026000 audit[3959]: AVC avc: denied { perfmon } for pid=3959 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.026000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.026000 audit[3959]: AVC avc: denied { bpf } for pid=3959 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.026000 audit: BPF prog-id=176 op=LOAD Jul 15 11:30:01.026000 audit[3959]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c0003136a8 items=0 ppid=3950 pid=3959 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.026000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6630356334643338663735346362623663346134376439656662373463 Jul 15 11:30:01.027480 systemd-resolved[1204]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:30:01.047507 env[1251]: time="2025-07-15T11:30:01.041716747Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:csi-node-driver-bdpgt,Uid:b065a6c7-4fee-4858-b630-917bce34c00e,Namespace:calico-system,Attempt:1,} returns sandbox id \"f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe\"" Jul 15 11:30:01.068821 systemd-networkd[1057]: cali863631863dc: Link UP Jul 15 11:30:01.071502 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:30:01.071559 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali863631863dc: link becomes ready Jul 15 11:30:01.071649 systemd-networkd[1057]: cali863631863dc: Gained carrier Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:00.903 [INFO][3907] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--klb5s-eth0 coredns-674b8bbfcf- kube-system c330bef8-f79b-4274-a807-a934b3cc71d4 949 0 2025-07-15 11:29:22 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-klb5s eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali863631863dc [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" Namespace="kube-system" Pod="coredns-674b8bbfcf-klb5s" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--klb5s-" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:00.903 [INFO][3907] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" Namespace="kube-system" Pod="coredns-674b8bbfcf-klb5s" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:00.932 [INFO][3927] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" HandleID="k8s-pod-network.e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:00.932 [INFO][3927] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" HandleID="k8s-pod-network.e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd210), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-klb5s", "timestamp":"2025-07-15 11:30:00.932212155 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:00.932 [INFO][3927] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:00.947 [INFO][3927] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:00.947 [INFO][3927] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.027 [INFO][3927] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" host="localhost" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.033 [INFO][3927] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.038 [INFO][3927] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.039 [INFO][3927] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.040 [INFO][3927] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.040 [INFO][3927] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" host="localhost" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.042 [INFO][3927] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.048 [INFO][3927] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" host="localhost" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.055 [INFO][3927] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.132/26] block=192.168.88.128/26 handle="k8s-pod-network.e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" host="localhost" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.055 [INFO][3927] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.132/26] handle="k8s-pod-network.e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" host="localhost" Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.055 [INFO][3927] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:01.084805 env[1251]: 2025-07-15 11:30:01.055 [INFO][3927] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.132/26] IPv6=[] ContainerID="e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" HandleID="k8s-pod-network.e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:30:01.085297 env[1251]: 2025-07-15 11:30:01.063 [INFO][3907] cni-plugin/k8s.go 418: Populated endpoint ContainerID="e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" Namespace="kube-system" Pod="coredns-674b8bbfcf-klb5s" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--klb5s-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"c330bef8-f79b-4274-a807-a934b3cc71d4", ResourceVersion:"949", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-klb5s", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali863631863dc", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:01.085297 env[1251]: 2025-07-15 11:30:01.063 [INFO][3907] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.132/32] ContainerID="e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" Namespace="kube-system" Pod="coredns-674b8bbfcf-klb5s" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:30:01.085297 env[1251]: 2025-07-15 11:30:01.063 [INFO][3907] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali863631863dc ContainerID="e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" Namespace="kube-system" Pod="coredns-674b8bbfcf-klb5s" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:30:01.085297 env[1251]: 2025-07-15 11:30:01.072 [INFO][3907] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" Namespace="kube-system" Pod="coredns-674b8bbfcf-klb5s" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:30:01.085297 env[1251]: 2025-07-15 11:30:01.072 [INFO][3907] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" Namespace="kube-system" Pod="coredns-674b8bbfcf-klb5s" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--klb5s-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"c330bef8-f79b-4274-a807-a934b3cc71d4", ResourceVersion:"949", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be", Pod:"coredns-674b8bbfcf-klb5s", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali863631863dc", MAC:"36:4d:7f:3e:e6:11", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:01.085297 env[1251]: 2025-07-15 11:30:01.083 [INFO][3907] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be" Namespace="kube-system" Pod="coredns-674b8bbfcf-klb5s" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:30:01.095471 env[1251]: time="2025-07-15T11:30:01.095415023Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:01.095627 env[1251]: time="2025-07-15T11:30:01.095596948Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:01.095728 env[1251]: time="2025-07-15T11:30:01.095613641Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:01.096564 env[1251]: time="2025-07-15T11:30:01.095896532Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be pid=4001 runtime=io.containerd.runc.v2 Jul 15 11:30:01.105000 audit[4016]: NETFILTER_CFG table=filter:108 family=2 entries=50 op=nft_register_chain pid=4016 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:01.105000 audit[4016]: SYSCALL arch=c000003e syscall=46 success=yes exit=24928 a0=3 a1=7ffe94ad28a0 a2=0 a3=7ffe94ad288c items=0 ppid=3463 pid=4016 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.105000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:01.111241 systemd[1]: Started cri-containerd-e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be.scope. Jul 15 11:30:01.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.123000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.123000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit: BPF prog-id=177 op=LOAD Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4001 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536626532646532353636666438316334313938656661333936666231 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4001 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536626532646532353636666438316334313938656661333936666231 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit: BPF prog-id=178 op=LOAD Jul 15 11:30:01.124000 audit[4010]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001dda40 items=0 ppid=4001 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536626532646532353636666438316334313938656661333936666231 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit: BPF prog-id=179 op=LOAD Jul 15 11:30:01.124000 audit[4010]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001dda88 items=0 ppid=4001 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536626532646532353636666438316334313938656661333936666231 Jul 15 11:30:01.124000 audit: BPF prog-id=179 op=UNLOAD Jul 15 11:30:01.124000 audit: BPF prog-id=178 op=UNLOAD Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { perfmon } for pid=4010 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit[4010]: AVC avc: denied { bpf } for pid=4010 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.124000 audit: BPF prog-id=180 op=LOAD Jul 15 11:30:01.124000 audit[4010]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001dde98 items=0 ppid=4001 pid=4010 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.124000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6536626532646532353636666438316334313938656661333936666231 Jul 15 11:30:01.126203 systemd-resolved[1204]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:30:01.156676 env[1251]: time="2025-07-15T11:30:01.156636118Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-klb5s,Uid:c330bef8-f79b-4274-a807-a934b3cc71d4,Namespace:kube-system,Attempt:1,} returns sandbox id \"e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be\"" Jul 15 11:30:01.167466 env[1251]: time="2025-07-15T11:30:01.167429048Z" level=info msg="CreateContainer within sandbox \"e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:30:01.184671 env[1251]: time="2025-07-15T11:30:01.184635142Z" level=info msg="CreateContainer within sandbox \"e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"7ac031ee17d3d960c03291686792ba407c1dbb6ce527649e04347bc984ace2b1\"" Jul 15 11:30:01.186510 env[1251]: time="2025-07-15T11:30:01.186481204Z" level=info msg="StartContainer for \"7ac031ee17d3d960c03291686792ba407c1dbb6ce527649e04347bc984ace2b1\"" Jul 15 11:30:01.197562 systemd[1]: Started cri-containerd-7ac031ee17d3d960c03291686792ba407c1dbb6ce527649e04347bc984ace2b1.scope. Jul 15 11:30:01.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit: BPF prog-id=181 op=LOAD Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4001 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633033316565313764336439363063303332393136383637393262 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=4001 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633033316565313764336439363063303332393136383637393262 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit: BPF prog-id=182 op=LOAD Jul 15 11:30:01.228000 audit[4043]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0003b6ae0 items=0 ppid=4001 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633033316565313764336439363063303332393136383637393262 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit: BPF prog-id=183 op=LOAD Jul 15 11:30:01.228000 audit[4043]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003b6b28 items=0 ppid=4001 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633033316565313764336439363063303332393136383637393262 Jul 15 11:30:01.228000 audit: BPF prog-id=183 op=UNLOAD Jul 15 11:30:01.228000 audit: BPF prog-id=182 op=UNLOAD Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { perfmon } for pid=4043 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit[4043]: AVC avc: denied { bpf } for pid=4043 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:01.228000 audit: BPF prog-id=184 op=LOAD Jul 15 11:30:01.228000 audit[4043]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003b6f38 items=0 ppid=4001 pid=4043 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:01.228000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3761633033316565313764336439363063303332393136383637393262 Jul 15 11:30:01.243012 env[1251]: time="2025-07-15T11:30:01.240231680Z" level=info msg="StartContainer for \"7ac031ee17d3d960c03291686792ba407c1dbb6ce527649e04347bc984ace2b1\" returns successfully" Jul 15 11:30:01.635000 audit[4054]: AVC avc: denied { getattr } for pid=4054 comm="coredns" path="cgroup:[4026532674]" dev="nsfs" ino=4026532674 scontext=system_u:system_r:svirt_lxc_net_t:s0:c42,c392 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:30:01.635000 audit[4054]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c000442870 a2=c0000c6518 a3=0 items=0 ppid=4001 pid=4054 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c42,c392 key=(null) Jul 15 11:30:01.635000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:30:01.776692 env[1251]: time="2025-07-15T11:30:01.776667895Z" level=info msg="StopPodSandbox for \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\"" Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.859 [INFO][4080] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.859 [INFO][4080] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" iface="eth0" netns="/var/run/netns/cni-a79fd566-ae8c-1d60-45c6-4c89c1ef16f8" Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.859 [INFO][4080] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" iface="eth0" netns="/var/run/netns/cni-a79fd566-ae8c-1d60-45c6-4c89c1ef16f8" Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.859 [INFO][4080] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" iface="eth0" netns="/var/run/netns/cni-a79fd566-ae8c-1d60-45c6-4c89c1ef16f8" Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.859 [INFO][4080] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.859 [INFO][4080] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.903 [INFO][4089] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.903 [INFO][4089] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.903 [INFO][4089] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.907 [WARNING][4089] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.907 [INFO][4089] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.908 [INFO][4089] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:01.914836 env[1251]: 2025-07-15 11:30:01.910 [INFO][4080] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:30:01.914836 env[1251]: time="2025-07-15T11:30:01.914193422Z" level=info msg="TearDown network for sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\" successfully" Jul 15 11:30:01.914836 env[1251]: time="2025-07-15T11:30:01.914217010Z" level=info msg="StopPodSandbox for \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\" returns successfully" Jul 15 11:30:01.914069 systemd[1]: run-netns-cni\x2da79fd566\x2dae8c\x2d1d60\x2d45c6\x2d4c89c1ef16f8.mount: Deactivated successfully. Jul 15 11:30:01.935902 env[1251]: time="2025-07-15T11:30:01.935874038Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6db74f8486-272tj,Uid:cea21dcf-c636-4c32-9de2-493a871086ec,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:30:02.045879 systemd-networkd[1057]: cali7529d19453e: Gained IPv6LL Jul 15 11:30:02.121264 systemd-networkd[1057]: caliaf714ea874c: Link UP Jul 15 11:30:02.123727 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:30:02.124063 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): caliaf714ea874c: link becomes ready Jul 15 11:30:02.123994 systemd-networkd[1057]: caliaf714ea874c: Gained carrier Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:01.985 [INFO][4095] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0 calico-apiserver-6db74f8486- calico-apiserver cea21dcf-c636-4c32-9de2-493a871086ec 962 0 2025-07-15 11:29:31 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:6db74f8486 projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-6db74f8486-272tj eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] caliaf714ea874c [] [] }} ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-272tj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--272tj-" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:01.985 [INFO][4095] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-272tj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.032 [INFO][4107] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.032 [INFO][4107] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc00025b210), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-6db74f8486-272tj", "timestamp":"2025-07-15 11:30:02.03231742 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.032 [INFO][4107] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.032 [INFO][4107] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.032 [INFO][4107] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.047 [INFO][4107] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" host="localhost" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.065 [INFO][4107] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.069 [INFO][4107] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.071 [INFO][4107] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.072 [INFO][4107] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.072 [INFO][4107] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" host="localhost" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.075 [INFO][4107] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6 Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.084 [INFO][4107] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" host="localhost" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.102 [INFO][4107] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.133/26] block=192.168.88.128/26 handle="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" host="localhost" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.102 [INFO][4107] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.133/26] handle="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" host="localhost" Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.102 [INFO][4107] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:02.161417 env[1251]: 2025-07-15 11:30:02.102 [INFO][4107] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.133/26] IPv6=[] ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:02.162183 env[1251]: 2025-07-15 11:30:02.110 [INFO][4095] cni-plugin/k8s.go 418: Populated endpoint ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-272tj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0", GenerateName:"calico-apiserver-6db74f8486-", Namespace:"calico-apiserver", SelfLink:"", UID:"cea21dcf-c636-4c32-9de2-493a871086ec", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6db74f8486", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-6db74f8486-272tj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaf714ea874c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:02.162183 env[1251]: 2025-07-15 11:30:02.110 [INFO][4095] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.133/32] ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-272tj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:02.162183 env[1251]: 2025-07-15 11:30:02.117 [INFO][4095] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to caliaf714ea874c ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-272tj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:02.162183 env[1251]: 2025-07-15 11:30:02.130 [INFO][4095] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-272tj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:02.162183 env[1251]: 2025-07-15 11:30:02.130 [INFO][4095] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-272tj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0", GenerateName:"calico-apiserver-6db74f8486-", Namespace:"calico-apiserver", SelfLink:"", UID:"cea21dcf-c636-4c32-9de2-493a871086ec", ResourceVersion:"962", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6db74f8486", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6", Pod:"calico-apiserver-6db74f8486-272tj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.133/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaf714ea874c", MAC:"a2:21:1f:cd:2b:41", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:02.162183 env[1251]: 2025-07-15 11:30:02.159 [INFO][4095] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Namespace="calico-apiserver" Pod="calico-apiserver-6db74f8486-272tj" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:02.190813 env[1251]: time="2025-07-15T11:30:02.190637237Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:02.190813 env[1251]: time="2025-07-15T11:30:02.190679415Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:02.190813 env[1251]: time="2025-07-15T11:30:02.190687013Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:02.199000 audit[4128]: NETFILTER_CFG table=filter:109 family=2 entries=49 op=nft_register_chain pid=4128 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:02.199000 audit[4128]: SYSCALL arch=c000003e syscall=46 success=yes exit=25452 a0=3 a1=7ffdcdb9c220 a2=0 a3=7ffdcdb9c20c items=0 ppid=3463 pid=4128 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:02.199000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:02.200835 env[1251]: time="2025-07-15T11:30:02.190989892Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6 pid=4129 runtime=io.containerd.runc.v2 Jul 15 11:30:02.211651 systemd[1]: Started cri-containerd-4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6.scope. Jul 15 11:30:02.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.236000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.236000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.236000 audit: BPF prog-id=185 op=LOAD Jul 15 11:30:02.237934 systemd-networkd[1057]: cali863631863dc: Gained IPv6LL Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4129 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:02.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464323035633866316535313536636261326438653734616235393364 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4129 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:02.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464323035633866316535313536636261326438653734616235393364 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit: BPF prog-id=186 op=LOAD Jul 15 11:30:02.238000 audit[4140]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001ccd70 items=0 ppid=4129 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:02.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464323035633866316535313536636261326438653734616235393364 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit: BPF prog-id=187 op=LOAD Jul 15 11:30:02.238000 audit[4140]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001ccdb8 items=0 ppid=4129 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:02.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464323035633866316535313536636261326438653734616235393364 Jul 15 11:30:02.238000 audit: BPF prog-id=187 op=UNLOAD Jul 15 11:30:02.238000 audit: BPF prog-id=186 op=UNLOAD Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { perfmon } for pid=4140 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit[4140]: AVC avc: denied { bpf } for pid=4140 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:02.238000 audit: BPF prog-id=188 op=LOAD Jul 15 11:30:02.238000 audit[4140]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001cd1c8 items=0 ppid=4129 pid=4140 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:02.238000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3464323035633866316535313536636261326438653734616235393364 Jul 15 11:30:02.239785 systemd-resolved[1204]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:30:02.277017 env[1251]: time="2025-07-15T11:30:02.276975296Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-6db74f8486-272tj,Uid:cea21dcf-c636-4c32-9de2-493a871086ec,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\"" Jul 15 11:30:02.430000 audit[4165]: NETFILTER_CFG table=filter:110 family=2 entries=20 op=nft_register_rule pid=4165 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:02.430000 audit[4165]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffc6443eb00 a2=0 a3=7ffc6443eaec items=0 ppid=2231 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:02.430000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:02.434000 audit[4165]: NETFILTER_CFG table=nat:111 family=2 entries=14 op=nft_register_rule pid=4165 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:02.434000 audit[4165]: SYSCALL arch=c000003e syscall=46 success=yes exit=3468 a0=3 a1=7ffc6443eb00 a2=0 a3=0 items=0 ppid=2231 pid=4165 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:02.434000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:02.505000 audit[4167]: NETFILTER_CFG table=filter:112 family=2 entries=17 op=nft_register_rule pid=4167 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:02.505000 audit[4167]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffeaa0e9a20 a2=0 a3=7ffeaa0e9a0c items=0 ppid=2231 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:02.505000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:02.511000 audit[4167]: NETFILTER_CFG table=nat:113 family=2 entries=35 op=nft_register_chain pid=4167 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:02.511000 audit[4167]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffeaa0e9a20 a2=0 a3=7ffeaa0e9a0c items=0 ppid=2231 pid=4167 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:02.511000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:02.677124 kubelet[2123]: I0715 11:30:02.429705 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-klb5s" podStartSLOduration=40.037429257 podStartE2EDuration="40.037429257s" podCreationTimestamp="2025-07-15 11:29:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:30:02.035225839 +0000 UTC m=+44.466775610" watchObservedRunningTime="2025-07-15 11:30:02.037429257 +0000 UTC m=+44.468979023" Jul 15 11:30:02.788348 env[1251]: time="2025-07-15T11:30:02.787068075Z" level=info msg="StopPodSandbox for \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\"" Jul 15 11:30:02.807075 env[1251]: time="2025-07-15T11:30:02.807048844Z" level=info msg="StopPodSandbox for \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\"" Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.910 [INFO][4187] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.910 [INFO][4187] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" iface="eth0" netns="/var/run/netns/cni-3f012938-2298-8399-1132-5b8141dc2897" Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.910 [INFO][4187] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" iface="eth0" netns="/var/run/netns/cni-3f012938-2298-8399-1132-5b8141dc2897" Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.911 [INFO][4187] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" iface="eth0" netns="/var/run/netns/cni-3f012938-2298-8399-1132-5b8141dc2897" Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.911 [INFO][4187] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.911 [INFO][4187] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.964 [INFO][4201] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" HandleID="k8s-pod-network.73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.964 [INFO][4201] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.964 [INFO][4201] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.978 [WARNING][4201] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" HandleID="k8s-pod-network.73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.978 [INFO][4201] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" HandleID="k8s-pod-network.73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.981 [INFO][4201] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:02.984572 env[1251]: 2025-07-15 11:30:02.982 [INFO][4187] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:30:02.992552 env[1251]: time="2025-07-15T11:30:02.986489413Z" level=info msg="TearDown network for sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\" successfully" Jul 15 11:30:02.992552 env[1251]: time="2025-07-15T11:30:02.986514887Z" level=info msg="StopPodSandbox for \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\" returns successfully" Jul 15 11:30:02.992552 env[1251]: time="2025-07-15T11:30:02.987049582Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79f4f75899-956zh,Uid:987cfc20-a8f4-4673-935d-50967ef2f542,Namespace:calico-system,Attempt:1,}" Jul 15 11:30:02.986338 systemd[1]: run-netns-cni\x2d3f012938\x2d2298\x2d8399\x2d1132\x2d5b8141dc2897.mount: Deactivated successfully. Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:02.935 [INFO][4192] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:02.935 [INFO][4192] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" iface="eth0" netns="/var/run/netns/cni-8c50e9ae-4bc3-f878-5c4c-28de3a93c9eb" Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:02.935 [INFO][4192] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" iface="eth0" netns="/var/run/netns/cni-8c50e9ae-4bc3-f878-5c4c-28de3a93c9eb" Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:02.935 [INFO][4192] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" iface="eth0" netns="/var/run/netns/cni-8c50e9ae-4bc3-f878-5c4c-28de3a93c9eb" Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:02.935 [INFO][4192] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:02.935 [INFO][4192] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:02.994 [INFO][4207] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" HandleID="k8s-pod-network.bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:02.994 [INFO][4207] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:02.994 [INFO][4207] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:02.999 [WARNING][4207] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" HandleID="k8s-pod-network.bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:02.999 [INFO][4207] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" HandleID="k8s-pod-network.bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:03.001 [INFO][4207] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:03.005972 env[1251]: 2025-07-15 11:30:03.004 [INFO][4192] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:30:03.016430 env[1251]: time="2025-07-15T11:30:03.008600546Z" level=info msg="TearDown network for sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\" successfully" Jul 15 11:30:03.016430 env[1251]: time="2025-07-15T11:30:03.008669703Z" level=info msg="StopPodSandbox for \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\" returns successfully" Jul 15 11:30:03.016430 env[1251]: time="2025-07-15T11:30:03.009285849Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xlhc8,Uid:4d847c07-b217-4471-ba1f-db8be894e130,Namespace:kube-system,Attempt:1,}" Jul 15 11:30:03.007836 systemd[1]: run-netns-cni\x2d8c50e9ae\x2d4bc3\x2df878\x2d5c4c\x2d28de3a93c9eb.mount: Deactivated successfully. Jul 15 11:30:03.236074 systemd-networkd[1057]: cali91a0bacf8cb: Link UP Jul 15 11:30:03.246348 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:30:03.246397 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali91a0bacf8cb: link becomes ready Jul 15 11:30:03.239179 systemd-networkd[1057]: cali91a0bacf8cb: Gained carrier Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.092 [INFO][4215] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0 calico-kube-controllers-79f4f75899- calico-system 987cfc20-a8f4-4673-935d-50967ef2f542 979 0 2025-07-15 11:29:35 +0000 UTC map[app.kubernetes.io/name:calico-kube-controllers k8s-app:calico-kube-controllers pod-template-hash:79f4f75899 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-kube-controllers] map[] [] [] []} {k8s localhost calico-kube-controllers-79f4f75899-956zh eth0 calico-kube-controllers [] [] [kns.calico-system ksa.calico-system.calico-kube-controllers] cali91a0bacf8cb [] [] }} ContainerID="cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" Namespace="calico-system" Pod="calico-kube-controllers-79f4f75899-956zh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.092 [INFO][4215] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" Namespace="calico-system" Pod="calico-kube-controllers-79f4f75899-956zh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.152 [INFO][4241] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" HandleID="k8s-pod-network.cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.152 [INFO][4241] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" HandleID="k8s-pod-network.cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd600), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"calico-kube-controllers-79f4f75899-956zh", "timestamp":"2025-07-15 11:30:03.152621961 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.153 [INFO][4241] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.153 [INFO][4241] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.154 [INFO][4241] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.159 [INFO][4241] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" host="localhost" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.180 [INFO][4241] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.183 [INFO][4241] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.184 [INFO][4241] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.185 [INFO][4241] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.185 [INFO][4241] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" host="localhost" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.186 [INFO][4241] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25 Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.201 [INFO][4241] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" host="localhost" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.230 [INFO][4241] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.134/26] block=192.168.88.128/26 handle="k8s-pod-network.cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" host="localhost" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.230 [INFO][4241] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.134/26] handle="k8s-pod-network.cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" host="localhost" Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.230 [INFO][4241] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:03.265230 env[1251]: 2025-07-15 11:30:03.230 [INFO][4241] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.134/26] IPv6=[] ContainerID="cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" HandleID="k8s-pod-network.cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:30:03.287203 env[1251]: 2025-07-15 11:30:03.232 [INFO][4215] cni-plugin/k8s.go 418: Populated endpoint ContainerID="cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" Namespace="calico-system" Pod="calico-kube-controllers-79f4f75899-956zh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0", GenerateName:"calico-kube-controllers-79f4f75899-", Namespace:"calico-system", SelfLink:"", UID:"987cfc20-a8f4-4673-935d-50967ef2f542", ResourceVersion:"979", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79f4f75899", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-kube-controllers-79f4f75899-956zh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali91a0bacf8cb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:03.287203 env[1251]: 2025-07-15 11:30:03.232 [INFO][4215] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.134/32] ContainerID="cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" Namespace="calico-system" Pod="calico-kube-controllers-79f4f75899-956zh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:30:03.287203 env[1251]: 2025-07-15 11:30:03.232 [INFO][4215] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali91a0bacf8cb ContainerID="cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" Namespace="calico-system" Pod="calico-kube-controllers-79f4f75899-956zh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:30:03.287203 env[1251]: 2025-07-15 11:30:03.239 [INFO][4215] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" Namespace="calico-system" Pod="calico-kube-controllers-79f4f75899-956zh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:30:03.287203 env[1251]: 2025-07-15 11:30:03.239 [INFO][4215] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" Namespace="calico-system" Pod="calico-kube-controllers-79f4f75899-956zh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0", GenerateName:"calico-kube-controllers-79f4f75899-", Namespace:"calico-system", SelfLink:"", UID:"987cfc20-a8f4-4673-935d-50967ef2f542", ResourceVersion:"979", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79f4f75899", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25", Pod:"calico-kube-controllers-79f4f75899-956zh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali91a0bacf8cb", MAC:"d6:b6:67:7d:a7:6c", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:03.287203 env[1251]: 2025-07-15 11:30:03.262 [INFO][4215] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25" Namespace="calico-system" Pod="calico-kube-controllers-79f4f75899-956zh" WorkloadEndpoint="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:30:03.361615 systemd-networkd[1057]: cali62ebd1110a9: Link UP Jul 15 11:30:03.362624 systemd-networkd[1057]: cali62ebd1110a9: Gained carrier Jul 15 11:30:03.363487 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali62ebd1110a9: link becomes ready Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.123 [INFO][4221] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0 coredns-674b8bbfcf- kube-system 4d847c07-b217-4471-ba1f-db8be894e130 980 0 2025-07-15 11:29:22 +0000 UTC map[k8s-app:kube-dns pod-template-hash:674b8bbfcf projectcalico.org/namespace:kube-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:coredns] map[] [] [] []} {k8s localhost coredns-674b8bbfcf-xlhc8 eth0 coredns [] [] [kns.kube-system ksa.kube-system.coredns] cali62ebd1110a9 [{dns UDP 53 0 } {dns-tcp TCP 53 0 } {metrics TCP 9153 0 }] [] }} ContainerID="3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" Namespace="kube-system" Pod="coredns-674b8bbfcf-xlhc8" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xlhc8-" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.123 [INFO][4221] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" Namespace="kube-system" Pod="coredns-674b8bbfcf-xlhc8" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.161 [INFO][4247] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" HandleID="k8s-pod-network.3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.162 [INFO][4247] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" HandleID="k8s-pod-network.3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0003254a0), Attrs:map[string]string{"namespace":"kube-system", "node":"localhost", "pod":"coredns-674b8bbfcf-xlhc8", "timestamp":"2025-07-15 11:30:03.16197978 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.162 [INFO][4247] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.230 [INFO][4247] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.231 [INFO][4247] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.260 [INFO][4247] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" host="localhost" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.280 [INFO][4247] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.284 [INFO][4247] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.286 [INFO][4247] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.317 [INFO][4247] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.317 [INFO][4247] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" host="localhost" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.322 [INFO][4247] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097 Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.334 [INFO][4247] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" host="localhost" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.358 [INFO][4247] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.135/26] block=192.168.88.128/26 handle="k8s-pod-network.3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" host="localhost" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.358 [INFO][4247] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.135/26] handle="k8s-pod-network.3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" host="localhost" Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.358 [INFO][4247] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:03.395086 env[1251]: 2025-07-15 11:30:03.358 [INFO][4247] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.135/26] IPv6=[] ContainerID="3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" HandleID="k8s-pod-network.3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:30:03.428174 env[1251]: 2025-07-15 11:30:03.360 [INFO][4221] cni-plugin/k8s.go 418: Populated endpoint ContainerID="3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" Namespace="kube-system" Pod="coredns-674b8bbfcf-xlhc8" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4d847c07-b217-4471-ba1f-db8be894e130", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"coredns-674b8bbfcf-xlhc8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali62ebd1110a9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:03.428174 env[1251]: 2025-07-15 11:30:03.360 [INFO][4221] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.135/32] ContainerID="3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" Namespace="kube-system" Pod="coredns-674b8bbfcf-xlhc8" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:30:03.428174 env[1251]: 2025-07-15 11:30:03.360 [INFO][4221] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali62ebd1110a9 ContainerID="3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" Namespace="kube-system" Pod="coredns-674b8bbfcf-xlhc8" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:30:03.428174 env[1251]: 2025-07-15 11:30:03.361 [INFO][4221] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" Namespace="kube-system" Pod="coredns-674b8bbfcf-xlhc8" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:30:03.428174 env[1251]: 2025-07-15 11:30:03.361 [INFO][4221] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" Namespace="kube-system" Pod="coredns-674b8bbfcf-xlhc8" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4d847c07-b217-4471-ba1f-db8be894e130", ResourceVersion:"980", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097", Pod:"coredns-674b8bbfcf-xlhc8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali62ebd1110a9", MAC:"0e:60:a2:99:51:e0", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:03.428174 env[1251]: 2025-07-15 11:30:03.392 [INFO][4221] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097" Namespace="kube-system" Pod="coredns-674b8bbfcf-xlhc8" WorkloadEndpoint="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:30:03.762468 env[1251]: time="2025-07-15T11:30:03.762416493Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:03.762699 env[1251]: time="2025-07-15T11:30:03.762466056Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:03.762699 env[1251]: time="2025-07-15T11:30:03.762479571Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:03.762849 env[1251]: time="2025-07-15T11:30:03.762814699Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25 pid=4278 runtime=io.containerd.runc.v2 Jul 15 11:30:03.777850 systemd[1]: Started cri-containerd-cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25.scope. Jul 15 11:30:03.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit: BPF prog-id=189 op=LOAD Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4278 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:03.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366663235613236363636653333656263363137386133383939303563 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4278 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:03.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366663235613236363636653333656263363137386133383939303563 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit: BPF prog-id=190 op=LOAD Jul 15 11:30:03.811000 audit[4288]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0000b1020 items=0 ppid=4278 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:03.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366663235613236363636653333656263363137386133383939303563 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.811000 audit: BPF prog-id=191 op=LOAD Jul 15 11:30:03.811000 audit[4288]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0000b1068 items=0 ppid=4278 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:03.811000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366663235613236363636653333656263363137386133383939303563 Jul 15 11:30:03.812000 audit: BPF prog-id=191 op=UNLOAD Jul 15 11:30:03.812000 audit: BPF prog-id=190 op=UNLOAD Jul 15 11:30:03.812000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.812000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.812000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.812000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.812000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.812000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.812000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.812000 audit[4288]: AVC avc: denied { perfmon } for pid=4288 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.812000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.812000 audit[4288]: AVC avc: denied { bpf } for pid=4288 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.812000 audit: BPF prog-id=192 op=LOAD Jul 15 11:30:03.812000 audit[4288]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0000b1478 items=0 ppid=4278 pid=4288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:03.812000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6366663235613236363636653333656263363137386133383939303563 Jul 15 11:30:03.830000 audit[4305]: NETFILTER_CFG table=filter:114 family=2 entries=52 op=nft_register_chain pid=4305 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:03.830000 audit[4305]: SYSCALL arch=c000003e syscall=46 success=yes exit=24328 a0=3 a1=7ffe18b33a00 a2=0 a3=7ffe18b339ec items=0 ppid=3463 pid=4305 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:03.830000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:03.820069 systemd-resolved[1204]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:30:03.854932 env[1251]: time="2025-07-15T11:30:03.852960101Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-kube-controllers-79f4f75899-956zh,Uid:987cfc20-a8f4-4673-935d-50967ef2f542,Namespace:calico-system,Attempt:1,} returns sandbox id \"cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25\"" Jul 15 11:30:03.902813 env[1251]: time="2025-07-15T11:30:03.902732212Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:03.902813 env[1251]: time="2025-07-15T11:30:03.902770718Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:03.902813 env[1251]: time="2025-07-15T11:30:03.902779619Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:03.903171 env[1251]: time="2025-07-15T11:30:03.903138853Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097 pid=4320 runtime=io.containerd.runc.v2 Jul 15 11:30:03.924360 systemd[1]: Started cri-containerd-3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097.scope. Jul 15 11:30:03.930266 systemd[1]: run-containerd-runc-k8s.io-3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097-runc.LhqtrE.mount: Deactivated successfully. Jul 15 11:30:03.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.971000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.971000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.971000 audit: BPF prog-id=193 op=LOAD Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4320 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:03.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361336539323964323039373830353832313632376439356461306432 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=c items=0 ppid=4320 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:03.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361336539323964323039373830353832313632376439356461306432 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit: BPF prog-id=194 op=LOAD Jul 15 11:30:03.972000 audit[4330]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0001c43c0 items=0 ppid=4320 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:03.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361336539323964323039373830353832313632376439356461306432 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit: BPF prog-id=195 op=LOAD Jul 15 11:30:03.972000 audit[4330]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0001c4408 items=0 ppid=4320 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:03.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361336539323964323039373830353832313632376439356461306432 Jul 15 11:30:03.972000 audit: BPF prog-id=195 op=UNLOAD Jul 15 11:30:03.972000 audit: BPF prog-id=194 op=UNLOAD Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { perfmon } for pid=4330 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit[4330]: AVC avc: denied { bpf } for pid=4330 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:03.972000 audit: BPF prog-id=196 op=LOAD Jul 15 11:30:03.972000 audit[4330]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0001c4818 items=0 ppid=4320 pid=4330 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:03.972000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3361336539323964323039373830353832313632376439356461306432 Jul 15 11:30:03.978618 systemd-resolved[1204]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:30:04.002385 env[1251]: time="2025-07-15T11:30:04.002316367Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:coredns-674b8bbfcf-xlhc8,Uid:4d847c07-b217-4471-ba1f-db8be894e130,Namespace:kube-system,Attempt:1,} returns sandbox id \"3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097\"" Jul 15 11:30:04.013000 audit[4363]: NETFILTER_CFG table=filter:115 family=2 entries=52 op=nft_register_chain pid=4363 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:04.013000 audit[4363]: SYSCALL arch=c000003e syscall=46 success=yes exit=23908 a0=3 a1=7ffc083d5ff0 a2=0 a3=7ffc083d5fdc items=0 ppid=3463 pid=4363 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:04.013000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:04.157505 systemd-networkd[1057]: caliaf714ea874c: Gained IPv6LL Jul 15 11:30:04.605475 systemd-networkd[1057]: cali62ebd1110a9: Gained IPv6LL Jul 15 11:30:04.691243 env[1251]: time="2025-07-15T11:30:04.691208984Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:04.697153 env[1251]: time="2025-07-15T11:30:04.697129455Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:04.699105 env[1251]: time="2025-07-15T11:30:04.699087200Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:04.701908 env[1251]: time="2025-07-15T11:30:04.701888048Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:04.702467 env[1251]: time="2025-07-15T11:30:04.702450942Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:30:04.988536 env[1251]: time="2025-07-15T11:30:04.987338097Z" level=info msg="StopPodSandbox for \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\"" Jul 15 11:30:04.988536 env[1251]: time="2025-07-15T11:30:04.987603603Z" level=info msg="StopPodSandbox for \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\"" Jul 15 11:30:05.058653 kubelet[2123]: E0715 11:30:05.051389 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.218s" Jul 15 11:30:05.068489 env[1251]: time="2025-07-15T11:30:05.068460649Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\"" Jul 15 11:30:05.133680 env[1251]: time="2025-07-15T11:30:05.133643367Z" level=info msg="CreateContainer within sandbox \"3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097\" for container &ContainerMetadata{Name:coredns,Attempt:0,}" Jul 15 11:30:05.134965 env[1251]: time="2025-07-15T11:30:05.134798220Z" level=info msg="CreateContainer within sandbox \"152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:30:05.150175 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2419111170.mount: Deactivated successfully. Jul 15 11:30:05.153529 env[1251]: time="2025-07-15T11:30:05.153502553Z" level=info msg="CreateContainer within sandbox \"152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c\"" Jul 15 11:30:05.160483 env[1251]: time="2025-07-15T11:30:05.160201018Z" level=info msg="StartContainer for \"f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c\"" Jul 15 11:30:05.165990 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3368413711.mount: Deactivated successfully. Jul 15 11:30:05.172944 env[1251]: time="2025-07-15T11:30:05.172921084Z" level=info msg="CreateContainer within sandbox \"3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097\" for &ContainerMetadata{Name:coredns,Attempt:0,} returns container id \"3dd9d5184bcbf7e23ea5fb8276a5cf80b189c1c4c77284b4c5a8e0905e0f4ce2\"" Jul 15 11:30:05.179399 env[1251]: time="2025-07-15T11:30:05.179376947Z" level=info msg="StartContainer for \"3dd9d5184bcbf7e23ea5fb8276a5cf80b189c1c4c77284b4c5a8e0905e0f4ce2\"" Jul 15 11:30:05.191469 systemd[1]: Started cri-containerd-f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c.scope. Jul 15 11:30:05.199581 systemd[1]: Started cri-containerd-3dd9d5184bcbf7e23ea5fb8276a5cf80b189c1c4c77284b4c5a8e0905e0f4ce2.scope. Jul 15 11:30:05.216617 kernel: kauditd_printk_skb: 479 callbacks suppressed Jul 15 11:30:05.217076 kernel: audit: type=1400 audit(1752579005.212:1307): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.226443 kernel: audit: type=1400 audit(1752579005.212:1308): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.226493 kernel: audit: type=1400 audit(1752579005.212:1309): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.227097 kernel: audit: type=1400 audit(1752579005.212:1310): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.233338 kernel: audit: type=1400 audit(1752579005.212:1311): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.060 [INFO][4385] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.061 [INFO][4385] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" iface="eth0" netns="/var/run/netns/cni-1b8cf345-1bb3-4d85-0e3f-b70af947aa7b" Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.061 [INFO][4385] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" iface="eth0" netns="/var/run/netns/cni-1b8cf345-1bb3-4d85-0e3f-b70af947aa7b" Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.061 [INFO][4385] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" iface="eth0" netns="/var/run/netns/cni-1b8cf345-1bb3-4d85-0e3f-b70af947aa7b" Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.061 [INFO][4385] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.061 [INFO][4385] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.180 [INFO][4396] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" HandleID="k8s-pod-network.85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.186 [INFO][4396] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.187 [INFO][4396] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.223 [WARNING][4396] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" HandleID="k8s-pod-network.85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.223 [INFO][4396] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" HandleID="k8s-pod-network.85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.227 [INFO][4396] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:05.234376 env[1251]: 2025-07-15 11:30:05.229 [INFO][4385] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:05.246748 kernel: audit: type=1400 audit(1752579005.212:1312): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.246782 kernel: audit: type=1400 audit(1752579005.212:1313): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.246801 kernel: audit: type=1400 audit(1752579005.212:1314): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.250879 kernel: audit: type=1400 audit(1752579005.212:1315): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.212000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.212000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.246552 systemd-networkd[1057]: cali91a0bacf8cb: Gained IPv6LL Jul 15 11:30:05.260419 kernel: audit: type=1400 audit(1752579005.216:1316): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit: BPF prog-id=197 op=LOAD Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4320 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364643964353138346263626637653233656135666238323736613563 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4320 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364643964353138346263626637653233656135666238323736613563 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit: BPF prog-id=198 op=LOAD Jul 15 11:30:05.216000 audit[4436]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0002fe220 items=0 ppid=4320 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364643964353138346263626637653233656135666238323736613563 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.216000 audit: BPF prog-id=199 op=LOAD Jul 15 11:30:05.216000 audit[4436]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0002fe268 items=0 ppid=4320 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.216000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364643964353138346263626637653233656135666238323736613563 Jul 15 11:30:05.219000 audit: BPF prog-id=199 op=UNLOAD Jul 15 11:30:05.219000 audit: BPF prog-id=198 op=UNLOAD Jul 15 11:30:05.219000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.219000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.219000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.219000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.219000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.219000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.219000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.219000 audit[4436]: AVC avc: denied { perfmon } for pid=4436 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.219000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.219000 audit[4436]: AVC avc: denied { bpf } for pid=4436 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.219000 audit: BPF prog-id=200 op=LOAD Jul 15 11:30:05.219000 audit[4436]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0002fe678 items=0 ppid=4320 pid=4436 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.219000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3364643964353138346263626637653233656135666238323736613563 Jul 15 11:30:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.251000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.251000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit: BPF prog-id=201 op=LOAD Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=3777 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639336261393766373361353534626165383663306530323463373237 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=3777 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639336261393766373361353534626165383663306530323463373237 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit: BPF prog-id=202 op=LOAD Jul 15 11:30:05.254000 audit[4424]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000316eb0 items=0 ppid=3777 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639336261393766373361353534626165383663306530323463373237 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit: BPF prog-id=203 op=LOAD Jul 15 11:30:05.254000 audit[4424]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000316ef8 items=0 ppid=3777 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639336261393766373361353534626165383663306530323463373237 Jul 15 11:30:05.254000 audit: BPF prog-id=203 op=UNLOAD Jul 15 11:30:05.254000 audit: BPF prog-id=202 op=UNLOAD Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { perfmon } for pid=4424 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit[4424]: AVC avc: denied { bpf } for pid=4424 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.254000 audit: BPF prog-id=204 op=LOAD Jul 15 11:30:05.254000 audit[4424]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000317308 items=0 ppid=3777 pid=4424 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.254000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6639336261393766373361353534626165383663306530323463373237 Jul 15 11:30:05.371060 env[1251]: time="2025-07-15T11:30:05.237688089Z" level=info msg="TearDown network for sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\" successfully" Jul 15 11:30:05.371060 env[1251]: time="2025-07-15T11:30:05.237719558Z" level=info msg="StopPodSandbox for \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\" returns successfully" Jul 15 11:30:05.371060 env[1251]: time="2025-07-15T11:30:05.238499189Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755674f4c-x5w6w,Uid:3aa78136-135a-4dab-af0b-7b5a1b7f7b38,Namespace:calico-apiserver,Attempt:1,}" Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.075 [INFO][4384] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.076 [INFO][4384] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" iface="eth0" netns="/var/run/netns/cni-7e676531-ff8d-fef5-838f-8ef424e5dae3" Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.076 [INFO][4384] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" iface="eth0" netns="/var/run/netns/cni-7e676531-ff8d-fef5-838f-8ef424e5dae3" Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.076 [INFO][4384] cni-plugin/dataplane_linux.go 597: Workload's veth was already gone. Nothing to do. ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" iface="eth0" netns="/var/run/netns/cni-7e676531-ff8d-fef5-838f-8ef424e5dae3" Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.076 [INFO][4384] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.076 [INFO][4384] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.180 [INFO][4403] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" HandleID="k8s-pod-network.4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.186 [INFO][4403] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.227 [INFO][4403] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.233 [WARNING][4403] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" HandleID="k8s-pod-network.4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.233 [INFO][4403] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" HandleID="k8s-pod-network.4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.234 [INFO][4403] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:05.371060 env[1251]: 2025-07-15 11:30:05.242 [INFO][4384] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:30:05.371060 env[1251]: time="2025-07-15T11:30:05.248043040Z" level=info msg="TearDown network for sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\" successfully" Jul 15 11:30:05.371060 env[1251]: time="2025-07-15T11:30:05.248068679Z" level=info msg="StopPodSandbox for \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\" returns successfully" Jul 15 11:30:05.371060 env[1251]: time="2025-07-15T11:30:05.250860663Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-pjcl6,Uid:4b4746b6-c971-43e9-be79-e903661bbbbc,Namespace:calico-system,Attempt:1,}" Jul 15 11:30:05.371060 env[1251]: time="2025-07-15T11:30:05.283817404Z" level=info msg="StartContainer for \"f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c\" returns successfully" Jul 15 11:30:05.371060 env[1251]: time="2025-07-15T11:30:05.284025899Z" level=info msg="StartContainer for \"3dd9d5184bcbf7e23ea5fb8276a5cf80b189c1c4c77284b4c5a8e0905e0f4ce2\" returns successfully" Jul 15 11:30:05.533352 systemd-networkd[1057]: cali53a2f79c10b: Link UP Jul 15 11:30:05.535871 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:30:05.535922 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali53a2f79c10b: link becomes ready Jul 15 11:30:05.536013 systemd-networkd[1057]: cali53a2f79c10b: Gained carrier Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.450 [INFO][4482] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0 calico-apiserver-755674f4c- calico-apiserver 3aa78136-135a-4dab-af0b-7b5a1b7f7b38 992 0 2025-07-15 11:29:32 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:755674f4c projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-755674f4c-x5w6w eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] cali53a2f79c10b [] [] }} ContainerID="b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-x5w6w" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--x5w6w-" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.450 [INFO][4482] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-x5w6w" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.474 [INFO][4499] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" HandleID="k8s-pod-network.b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.474 [INFO][4499] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" HandleID="k8s-pod-network.b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002cd820), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-755674f4c-x5w6w", "timestamp":"2025-07-15 11:30:05.474709644 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.474 [INFO][4499] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.474 [INFO][4499] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.474 [INFO][4499] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.493 [INFO][4499] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" host="localhost" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.498 [INFO][4499] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.505 [INFO][4499] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.507 [INFO][4499] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.509 [INFO][4499] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.509 [INFO][4499] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" host="localhost" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.510 [INFO][4499] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.515 [INFO][4499] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" host="localhost" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.524 [INFO][4499] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.136/26] block=192.168.88.128/26 handle="k8s-pod-network.b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" host="localhost" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.524 [INFO][4499] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.136/26] handle="k8s-pod-network.b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" host="localhost" Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.524 [INFO][4499] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:05.546030 env[1251]: 2025-07-15 11:30:05.524 [INFO][4499] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.136/26] IPv6=[] ContainerID="b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" HandleID="k8s-pod-network.b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:05.553625 env[1251]: 2025-07-15 11:30:05.527 [INFO][4482] cni-plugin/k8s.go 418: Populated endpoint ContainerID="b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-x5w6w" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0", GenerateName:"calico-apiserver-755674f4c-", Namespace:"calico-apiserver", SelfLink:"", UID:"3aa78136-135a-4dab-af0b-7b5a1b7f7b38", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755674f4c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-755674f4c-x5w6w", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53a2f79c10b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:05.553625 env[1251]: 2025-07-15 11:30:05.527 [INFO][4482] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.136/32] ContainerID="b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-x5w6w" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:05.553625 env[1251]: 2025-07-15 11:30:05.527 [INFO][4482] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali53a2f79c10b ContainerID="b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-x5w6w" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:05.553625 env[1251]: 2025-07-15 11:30:05.536 [INFO][4482] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-x5w6w" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:05.553625 env[1251]: 2025-07-15 11:30:05.536 [INFO][4482] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-x5w6w" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0", GenerateName:"calico-apiserver-755674f4c-", Namespace:"calico-apiserver", SelfLink:"", UID:"3aa78136-135a-4dab-af0b-7b5a1b7f7b38", ResourceVersion:"992", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755674f4c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad", Pod:"calico-apiserver-755674f4c-x5w6w", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53a2f79c10b", MAC:"22:11:f8:87:0b:71", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:05.553625 env[1251]: 2025-07-15 11:30:05.543 [INFO][4482] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-x5w6w" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:05.560256 env[1251]: time="2025-07-15T11:30:05.560199564Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:05.560256 env[1251]: time="2025-07-15T11:30:05.560237753Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:05.560425 env[1251]: time="2025-07-15T11:30:05.560245193Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:05.560969 env[1251]: time="2025-07-15T11:30:05.560882963Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad pid=4532 runtime=io.containerd.runc.v2 Jul 15 11:30:05.571933 systemd[1]: Started cri-containerd-b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad.scope. Jul 15 11:30:05.582000 audit[4553]: NETFILTER_CFG table=filter:116 family=2 entries=61 op=nft_register_chain pid=4553 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:05.582000 audit[4553]: SYSCALL arch=c000003e syscall=46 success=yes exit=29016 a0=3 a1=7fffbac84130 a2=0 a3=7fffbac8411c items=0 ppid=3463 pid=4553 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.582000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:05.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.588000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.588000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.588000 audit: BPF prog-id=205 op=LOAD Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4532 pid=4543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235343838333132666565333031646337623562646330356662393732 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=c items=0 ppid=4532 pid=4543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235343838333132666565333031646337623562646330356662393732 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit: BPF prog-id=206 op=LOAD Jul 15 11:30:05.589000 audit[4543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000229c00 items=0 ppid=4532 pid=4543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235343838333132666565333031646337623562646330356662393732 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit: BPF prog-id=207 op=LOAD Jul 15 11:30:05.589000 audit[4543]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000229c48 items=0 ppid=4532 pid=4543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235343838333132666565333031646337623562646330356662393732 Jul 15 11:30:05.589000 audit: BPF prog-id=207 op=UNLOAD Jul 15 11:30:05.589000 audit: BPF prog-id=206 op=UNLOAD Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { perfmon } for pid=4543 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit[4543]: AVC avc: denied { bpf } for pid=4543 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.589000 audit: BPF prog-id=208 op=LOAD Jul 15 11:30:05.589000 audit[4543]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c00030e058 items=0 ppid=4532 pid=4543 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.589000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6235343838333132666565333031646337623562646330356662393732 Jul 15 11:30:05.593073 systemd-resolved[1204]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:30:05.635810 env[1251]: time="2025-07-15T11:30:05.635784301Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755674f4c-x5w6w,Uid:3aa78136-135a-4dab-af0b-7b5a1b7f7b38,Namespace:calico-apiserver,Attempt:1,} returns sandbox id \"b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad\"" Jul 15 11:30:05.645336 systemd-networkd[1057]: cali95ef4decc35: Link UP Jul 15 11:30:05.647123 systemd-networkd[1057]: cali95ef4decc35: Gained carrier Jul 15 11:30:05.651741 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): cali95ef4decc35: link becomes ready Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.450 [INFO][4473] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0 goldmane-768f4c5c69- calico-system 4b4746b6-c971-43e9-be79-e903661bbbbc 993 0 2025-07-15 11:29:35 +0000 UTC map[app.kubernetes.io/name:goldmane k8s-app:goldmane pod-template-hash:768f4c5c69 projectcalico.org/namespace:calico-system projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:goldmane] map[] [] [] []} {k8s localhost goldmane-768f4c5c69-pjcl6 eth0 goldmane [] [] [kns.calico-system ksa.calico-system.goldmane] cali95ef4decc35 [] [] }} ContainerID="6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" Namespace="calico-system" Pod="goldmane-768f4c5c69-pjcl6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--pjcl6-" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.450 [INFO][4473] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" Namespace="calico-system" Pod="goldmane-768f4c5c69-pjcl6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.475 [INFO][4496] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" HandleID="k8s-pod-network.6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.475 [INFO][4496] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" HandleID="k8s-pod-network.6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc0002b74a0), Attrs:map[string]string{"namespace":"calico-system", "node":"localhost", "pod":"goldmane-768f4c5c69-pjcl6", "timestamp":"2025-07-15 11:30:05.475182191 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.475 [INFO][4496] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.525 [INFO][4496] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.525 [INFO][4496] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.593 [INFO][4496] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" host="localhost" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.598 [INFO][4496] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.603 [INFO][4496] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.613 [INFO][4496] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.616 [INFO][4496] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.616 [INFO][4496] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" host="localhost" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.617 [INFO][4496] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.622 [INFO][4496] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" host="localhost" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.632 [INFO][4496] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.137/26] block=192.168.88.128/26 handle="k8s-pod-network.6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" host="localhost" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.633 [INFO][4496] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.137/26] handle="k8s-pod-network.6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" host="localhost" Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.633 [INFO][4496] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:05.658164 env[1251]: 2025-07-15 11:30:05.633 [INFO][4496] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.137/26] IPv6=[] ContainerID="6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" HandleID="k8s-pod-network.6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:30:05.659582 env[1251]: 2025-07-15 11:30:05.636 [INFO][4473] cni-plugin/k8s.go 418: Populated endpoint ContainerID="6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" Namespace="calico-system" Pod="goldmane-768f4c5c69-pjcl6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"4b4746b6-c971-43e9-be79-e903661bbbbc", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"goldmane-768f4c5c69-pjcl6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali95ef4decc35", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:05.659582 env[1251]: 2025-07-15 11:30:05.636 [INFO][4473] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.137/32] ContainerID="6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" Namespace="calico-system" Pod="goldmane-768f4c5c69-pjcl6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:30:05.659582 env[1251]: 2025-07-15 11:30:05.636 [INFO][4473] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to cali95ef4decc35 ContainerID="6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" Namespace="calico-system" Pod="goldmane-768f4c5c69-pjcl6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:30:05.659582 env[1251]: 2025-07-15 11:30:05.647 [INFO][4473] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" Namespace="calico-system" Pod="goldmane-768f4c5c69-pjcl6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:30:05.659582 env[1251]: 2025-07-15 11:30:05.647 [INFO][4473] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" Namespace="calico-system" Pod="goldmane-768f4c5c69-pjcl6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"4b4746b6-c971-43e9-be79-e903661bbbbc", ResourceVersion:"993", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c", Pod:"goldmane-768f4c5c69-pjcl6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali95ef4decc35", MAC:"ba:f3:32:07:51:80", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:05.659582 env[1251]: 2025-07-15 11:30:05.655 [INFO][4473] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c" Namespace="calico-system" Pod="goldmane-768f4c5c69-pjcl6" WorkloadEndpoint="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:30:05.673158 env[1251]: time="2025-07-15T11:30:05.671842533Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:05.673158 env[1251]: time="2025-07-15T11:30:05.671873198Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:05.673158 env[1251]: time="2025-07-15T11:30:05.671880579Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:05.673158 env[1251]: time="2025-07-15T11:30:05.671996694Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c pid=4578 runtime=io.containerd.runc.v2 Jul 15 11:30:05.685361 systemd[1]: Started cri-containerd-6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c.scope. Jul 15 11:30:05.696000 audit[4598]: NETFILTER_CFG table=filter:117 family=2 entries=78 op=nft_register_chain pid=4598 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:05.696000 audit[4598]: SYSCALL arch=c000003e syscall=46 success=yes exit=36348 a0=3 a1=7ffd99b06370 a2=0 a3=7ffd99b0635c items=0 ppid=3463 pid=4598 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.696000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:05.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit: BPF prog-id=209 op=LOAD Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001c5c48 a2=10 a3=1c items=0 ppid=4578 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636343735373063363032616561616539383332333137353439643434 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001c56b0 a2=3c a3=c items=0 ppid=4578 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636343735373063363032616561616539383332333137353439643434 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit: BPF prog-id=210 op=LOAD Jul 15 11:30:05.709000 audit[4586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c59d8 a2=78 a3=c000024450 items=0 ppid=4578 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636343735373063363032616561616539383332333137353439643434 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit: BPF prog-id=211 op=LOAD Jul 15 11:30:05.709000 audit[4586]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001c5770 a2=78 a3=c000024498 items=0 ppid=4578 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636343735373063363032616561616539383332333137353439643434 Jul 15 11:30:05.709000 audit: BPF prog-id=211 op=UNLOAD Jul 15 11:30:05.709000 audit: BPF prog-id=210 op=UNLOAD Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { perfmon } for pid=4586 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit[4586]: AVC avc: denied { bpf } for pid=4586 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:05.709000 audit: BPF prog-id=212 op=LOAD Jul 15 11:30:05.709000 audit[4586]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001c5c30 a2=78 a3=c0000248a8 items=0 ppid=4578 pid=4586 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:05.709000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3636343735373063363032616561616539383332333137353439643434 Jul 15 11:30:05.713713 systemd-resolved[1204]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:30:05.739927 env[1251]: time="2025-07-15T11:30:05.739889352Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:goldmane-768f4c5c69-pjcl6,Uid:4b4746b6-c971-43e9-be79-e903661bbbbc,Namespace:calico-system,Attempt:1,} returns sandbox id \"6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c\"" Jul 15 11:30:05.805000 audit[4448]: AVC avc: denied { getattr } for pid=4448 comm="coredns" path="cgroup:[4026532998]" dev="nsfs" ino=4026532998 scontext=system_u:system_r:svirt_lxc_net_t:s0:c126,c315 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 Jul 15 11:30:05.805000 audit[4448]: SYSCALL arch=c000003e syscall=262 success=no exit=-13 a0=ffffffffffffff9c a1=c00005a600 a2=c0000ba038 a3=0 items=0 ppid=4320 pid=4448 auid=4294967295 uid=65532 gid=65532 euid=65532 suid=65532 fsuid=65532 egid=65532 sgid=65532 fsgid=65532 tty=(none) ses=4294967295 comm="coredns" exe="/coredns" subj=system_u:system_r:svirt_lxc_net_t:s0:c126,c315 key=(null) Jul 15 11:30:05.805000 audit: PROCTITLE proctitle=2F636F7265646E73002D636F6E66002F6574632F636F7265646E732F436F726566696C65 Jul 15 11:30:06.149240 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount954986985.mount: Deactivated successfully. Jul 15 11:30:06.150003 systemd[1]: run-netns-cni\x2d7e676531\x2dff8d\x2dfef5\x2d838f\x2d8ef424e5dae3.mount: Deactivated successfully. Jul 15 11:30:06.150044 systemd[1]: run-netns-cni\x2d1b8cf345\x2d1bb3\x2d4d85\x2d0e3f\x2db70af947aa7b.mount: Deactivated successfully. Jul 15 11:30:06.357561 env[1251]: time="2025-07-15T11:30:06.356551688Z" level=info msg="CreateContainer within sandbox \"b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:30:06.373523 env[1251]: time="2025-07-15T11:30:06.373434898Z" level=info msg="CreateContainer within sandbox \"b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"b26a2aa2ea9fa6b156b822f621d004ff505d05d5e2468255aa03b97d1ba953e2\"" Jul 15 11:30:06.375631 env[1251]: time="2025-07-15T11:30:06.375025500Z" level=info msg="StartContainer for \"b26a2aa2ea9fa6b156b822f621d004ff505d05d5e2468255aa03b97d1ba953e2\"" Jul 15 11:30:06.405151 systemd[1]: Started cri-containerd-b26a2aa2ea9fa6b156b822f621d004ff505d05d5e2468255aa03b97d1ba953e2.scope. Jul 15 11:30:06.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.452000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.452000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.452000 audit: BPF prog-id=213 op=LOAD Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=4532 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232366132616132656139666136623135366238323266363231643030 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=4532 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232366132616132656139666136623135366238323266363231643030 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit: BPF prog-id=214 op=LOAD Jul 15 11:30:06.453000 audit[4624]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c0002ddf00 items=0 ppid=4532 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232366132616132656139666136623135366238323266363231643030 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit: BPF prog-id=215 op=LOAD Jul 15 11:30:06.453000 audit[4624]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c0002ddf48 items=0 ppid=4532 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232366132616132656139666136623135366238323266363231643030 Jul 15 11:30:06.453000 audit: BPF prog-id=215 op=UNLOAD Jul 15 11:30:06.453000 audit: BPF prog-id=214 op=UNLOAD Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { perfmon } for pid=4624 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit[4624]: AVC avc: denied { bpf } for pid=4624 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:06.453000 audit: BPF prog-id=216 op=LOAD Jul 15 11:30:06.453000 audit[4624]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c0003c2358 items=0 ppid=4532 pid=4624 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:06.453000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6232366132616132656139666136623135366238323266363231643030 Jul 15 11:30:06.486273 env[1251]: time="2025-07-15T11:30:06.486234153Z" level=info msg="StartContainer for \"b26a2aa2ea9fa6b156b822f621d004ff505d05d5e2468255aa03b97d1ba953e2\" returns successfully" Jul 15 11:30:06.489177 kubelet[2123]: I0715 11:30:06.467628 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="kube-system/coredns-674b8bbfcf-xlhc8" podStartSLOduration=44.443759816 podStartE2EDuration="44.443759816s" podCreationTimestamp="2025-07-15 11:29:22 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:30:06.435091182 +0000 UTC m=+48.866640947" watchObservedRunningTime="2025-07-15 11:30:06.443759816 +0000 UTC m=+48.875309582" Jul 15 11:30:06.507833 kubelet[2123]: I0715 11:30:06.507789 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6db74f8486-2rx6m" podStartSLOduration=30.573768221999998 podStartE2EDuration="35.507775317s" podCreationTimestamp="2025-07-15 11:29:31 +0000 UTC" firstStartedPulling="2025-07-15 11:30:00.096903872 +0000 UTC m=+42.528453632" lastFinishedPulling="2025-07-15 11:30:05.030910968 +0000 UTC m=+47.462460727" observedRunningTime="2025-07-15 11:30:06.507549178 +0000 UTC m=+48.939098949" watchObservedRunningTime="2025-07-15 11:30:06.507775317 +0000 UTC m=+48.939325083" Jul 15 11:30:07.035000 audit[4663]: NETFILTER_CFG table=filter:118 family=2 entries=14 op=nft_register_rule pid=4663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:07.035000 audit[4663]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffda008d7b0 a2=0 a3=7ffda008d79c items=0 ppid=2231 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:07.035000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:07.039000 audit[4663]: NETFILTER_CFG table=nat:119 family=2 entries=44 op=nft_register_rule pid=4663 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:07.039000 audit[4663]: SYSCALL arch=c000003e syscall=46 success=yes exit=14196 a0=3 a1=7ffda008d7b0 a2=0 a3=7ffda008d79c items=0 ppid=2231 pid=4663 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:07.039000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:07.060000 audit[4665]: NETFILTER_CFG table=filter:120 family=2 entries=14 op=nft_register_rule pid=4665 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:07.060000 audit[4665]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7fff6f3917e0 a2=0 a3=7fff6f3917cc items=0 ppid=2231 pid=4665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:07.060000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:07.065000 audit[4665]: NETFILTER_CFG table=nat:121 family=2 entries=20 op=nft_register_rule pid=4665 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:07.065000 audit[4665]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7fff6f3917e0 a2=0 a3=7fff6f3917cc items=0 ppid=2231 pid=4665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:07.065000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:07.152554 systemd[1]: run-containerd-runc-k8s.io-b26a2aa2ea9fa6b156b822f621d004ff505d05d5e2468255aa03b97d1ba953e2-runc.oYyVRq.mount: Deactivated successfully. Jul 15 11:30:07.165497 systemd-networkd[1057]: cali53a2f79c10b: Gained IPv6LL Jul 15 11:30:07.413634 kubelet[2123]: I0715 11:30:07.413564 2123 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:30:07.433312 kubelet[2123]: I0715 11:30:07.433268 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-755674f4c-x5w6w" podStartSLOduration=35.433254983 podStartE2EDuration="35.433254983s" podCreationTimestamp="2025-07-15 11:29:32 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:30:07.432045924 +0000 UTC m=+49.863595697" watchObservedRunningTime="2025-07-15 11:30:07.433254983 +0000 UTC m=+49.864804749" Jul 15 11:30:07.485451 systemd-networkd[1057]: cali95ef4decc35: Gained IPv6LL Jul 15 11:30:07.618000 audit[4635]: AVC avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:30:07.618000 audit[4635]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001016d80 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:30:07.618000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:30:07.697000 audit[4455]: AVC avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:30:07.697000 audit[4455]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001534d20 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:30:07.697000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:30:08.078000 audit[4667]: NETFILTER_CFG table=filter:122 family=2 entries=14 op=nft_register_rule pid=4667 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:08.078000 audit[4667]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffe613b7eb0 a2=0 a3=7ffe613b7e9c items=0 ppid=2231 pid=4667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:08.078000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:08.106000 audit[4667]: NETFILTER_CFG table=nat:123 family=2 entries=56 op=nft_register_chain pid=4667 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:08.106000 audit[4667]: SYSCALL arch=c000003e syscall=46 success=yes exit=19860 a0=3 a1=7ffe613b7eb0 a2=0 a3=7ffe613b7e9c items=0 ppid=2231 pid=4667 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:08.106000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:08.407590 kubelet[2123]: I0715 11:30:08.407532 2123 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:30:09.010110 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4130253772.mount: Deactivated successfully. Jul 15 11:30:09.049629 env[1251]: time="2025-07-15T11:30:09.049601609Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:09.057719 env[1251]: time="2025-07-15T11:30:09.055446630Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:09.060989 env[1251]: time="2025-07-15T11:30:09.060967842Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/whisker-backend:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:09.061851 env[1251]: time="2025-07-15T11:30:09.061834681Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/whisker-backend:v3.30.2\" returns image reference \"sha256:6ba7e39edcd8be6d32dfccbfdb65533a727b14a19173515e91607d4259f8ee7f\"" Jul 15 11:30:09.062284 env[1251]: time="2025-07-15T11:30:09.062271265Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/whisker-backend@sha256:fbf7f21f5aba95930803ad7e7dea8b083220854eae72c2a7c51681c09c5614b5,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:09.073057 env[1251]: time="2025-07-15T11:30:09.073015499Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\"" Jul 15 11:30:09.114112 env[1251]: time="2025-07-15T11:30:09.114088660Z" level=info msg="CreateContainer within sandbox \"090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3\" for container &ContainerMetadata{Name:whisker-backend,Attempt:0,}" Jul 15 11:30:09.122508 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2812027963.mount: Deactivated successfully. Jul 15 11:30:09.125381 env[1251]: time="2025-07-15T11:30:09.125302194Z" level=info msg="CreateContainer within sandbox \"090268c10475ca0bc5d3f1c88a616076a6d1d456314ae8897c82aa108ade4fd3\" for &ContainerMetadata{Name:whisker-backend,Attempt:0,} returns container id \"9f7388723e7182e5728a68a26bd68c7f170c177b5d64132ab9f09f570e2d6ce1\"" Jul 15 11:30:09.126266 env[1251]: time="2025-07-15T11:30:09.126251244Z" level=info msg="StartContainer for \"9f7388723e7182e5728a68a26bd68c7f170c177b5d64132ab9f09f570e2d6ce1\"" Jul 15 11:30:09.157777 systemd[1]: Started cri-containerd-9f7388723e7182e5728a68a26bd68c7f170c177b5d64132ab9f09f570e2d6ce1.scope. Jul 15 11:30:09.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.165000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.165000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.165000 audit: BPF prog-id=217 op=LOAD Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=3676 pid=4683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:09.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373338383732336537313832653537323861363861323662643638 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=3676 pid=4683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:09.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373338383732336537313832653537323861363861323662643638 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit: BPF prog-id=218 op=LOAD Jul 15 11:30:09.166000 audit[4683]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c0003a2f40 items=0 ppid=3676 pid=4683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:09.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373338383732336537313832653537323861363861323662643638 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit: BPF prog-id=219 op=LOAD Jul 15 11:30:09.166000 audit[4683]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c0003a2f88 items=0 ppid=3676 pid=4683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:09.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373338383732336537313832653537323861363861323662643638 Jul 15 11:30:09.166000 audit: BPF prog-id=219 op=UNLOAD Jul 15 11:30:09.166000 audit: BPF prog-id=218 op=UNLOAD Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { perfmon } for pid=4683 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit[4683]: AVC avc: denied { bpf } for pid=4683 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:09.166000 audit: BPF prog-id=220 op=LOAD Jul 15 11:30:09.166000 audit[4683]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003a3398 items=0 ppid=3676 pid=4683 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:09.166000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3966373338383732336537313832653537323861363861323662643638 Jul 15 11:30:09.212529 env[1251]: time="2025-07-15T11:30:09.198264097Z" level=info msg="StartContainer for \"9f7388723e7182e5728a68a26bd68c7f170c177b5d64132ab9f09f570e2d6ce1\" returns successfully" Jul 15 11:30:09.448223 kubelet[2123]: I0715 11:30:09.439712 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/whisker-5796ccbbd4-kcnvb" podStartSLOduration=2.044730111 podStartE2EDuration="12.434968403s" podCreationTimestamp="2025-07-15 11:29:57 +0000 UTC" firstStartedPulling="2025-07-15 11:29:58.682675701 +0000 UTC m=+41.114225460" lastFinishedPulling="2025-07-15 11:30:09.072913989 +0000 UTC m=+51.504463752" observedRunningTime="2025-07-15 11:30:09.432237385 +0000 UTC m=+51.863787157" watchObservedRunningTime="2025-07-15 11:30:09.434968403 +0000 UTC m=+51.866518169" Jul 15 11:30:09.468000 audit[4714]: NETFILTER_CFG table=filter:124 family=2 entries=13 op=nft_register_rule pid=4714 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:09.468000 audit[4714]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fffc67f4d20 a2=0 a3=7fffc67f4d0c items=0 ppid=2231 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:09.468000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:09.474000 audit[4714]: NETFILTER_CFG table=nat:125 family=2 entries=27 op=nft_register_chain pid=4714 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:09.474000 audit[4714]: SYSCALL arch=c000003e syscall=46 success=yes exit=9348 a0=3 a1=7fffc67f4d20 a2=0 a3=7fffc67f4d0c items=0 ppid=2231 pid=4714 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:09.474000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:11.189073 kubelet[2123]: I0715 11:30:11.187892 2123 prober_manager.go:312] "Failed to trigger a manual run" probe="Readiness" Jul 15 11:30:11.405000 audit[4719]: NETFILTER_CFG table=filter:126 family=2 entries=11 op=nft_register_rule pid=4719 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:11.409494 kernel: kauditd_printk_skb: 371 callbacks suppressed Jul 15 11:30:11.418718 kernel: audit: type=1325 audit(1752579011.405:1428): table=filter:126 family=2 entries=11 op=nft_register_rule pid=4719 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:11.419980 kernel: audit: type=1300 audit(1752579011.405:1428): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffeb9ad6700 a2=0 a3=7ffeb9ad66ec items=0 ppid=2231 pid=4719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:11.420016 kernel: audit: type=1327 audit(1752579011.405:1428): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:11.405000 audit[4719]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffeb9ad6700 a2=0 a3=7ffeb9ad66ec items=0 ppid=2231 pid=4719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:11.405000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:11.416000 audit[4719]: NETFILTER_CFG table=nat:127 family=2 entries=29 op=nft_register_chain pid=4719 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:11.416000 audit[4719]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffeb9ad6700 a2=0 a3=7ffeb9ad66ec items=0 ppid=2231 pid=4719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:11.427986 kernel: audit: type=1325 audit(1752579011.416:1429): table=nat:127 family=2 entries=29 op=nft_register_chain pid=4719 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:11.428128 kernel: audit: type=1300 audit(1752579011.416:1429): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffeb9ad6700 a2=0 a3=7ffeb9ad66ec items=0 ppid=2231 pid=4719 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:11.428169 kernel: audit: type=1327 audit(1752579011.416:1429): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:11.416000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:11.706818 env[1251]: time="2025-07-15T11:30:11.706769776Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:11.707855 env[1251]: time="2025-07-15T11:30:11.707551328Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:11.708192 env[1251]: time="2025-07-15T11:30:11.708175024Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/csi:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:11.710767 env[1251]: time="2025-07-15T11:30:11.710741486Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/csi@sha256:e570128aa8067a2f06b96d3cc98afa2e0a4b9790b435ee36ca051c8e72aeb8d0,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:11.711093 env[1251]: time="2025-07-15T11:30:11.711070597Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/csi:v3.30.2\" returns image reference \"sha256:c7fd1cc652979d89a51bbcc125e28e90c9815c0bd8f922a5bd36eed4e1927c6d\"" Jul 15 11:30:11.775627 env[1251]: time="2025-07-15T11:30:11.775601588Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\"" Jul 15 11:30:12.148596 env[1251]: time="2025-07-15T11:30:12.148567292Z" level=info msg="CreateContainer within sandbox \"f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe\" for container &ContainerMetadata{Name:calico-csi,Attempt:0,}" Jul 15 11:30:12.208000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:12.344450 kernel: audit: type=1400 audit(1752579012.208:1431): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:12.346504 kernel: audit: type=1400 audit(1752579012.208:1430): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:12.346535 kernel: audit: type=1300 audit(1752579012.208:1431): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00098c540 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:30:12.347938 kernel: audit: type=1327 audit(1752579012.208:1431): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:12.208000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:12.208000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00098c540 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:30:12.208000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:12.208000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00137dbe0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:30:12.208000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:12.380801 env[1251]: time="2025-07-15T11:30:12.341821616Z" level=info msg="CreateContainer within sandbox \"f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe\" for &ContainerMetadata{Name:calico-csi,Attempt:0,} returns container id \"f4eb493ea84bf0f01ab0c34f123c0e6c2e2e45489afa2effa92d170c0584ede5\"" Jul 15 11:30:12.380801 env[1251]: time="2025-07-15T11:30:12.351140829Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:12.380801 env[1251]: time="2025-07-15T11:30:12.353736220Z" level=info msg="ImageUpdate event &ImageUpdate{Name:sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:12.380801 env[1251]: time="2025-07-15T11:30:12.355048646Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:12.380801 env[1251]: time="2025-07-15T11:30:12.355542754Z" level=info msg="StartContainer for \"f4eb493ea84bf0f01ab0c34f123c0e6c2e2e45489afa2effa92d170c0584ede5\"" Jul 15 11:30:12.380801 env[1251]: time="2025-07-15T11:30:12.356558390Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/apiserver@sha256:ec6b10660962e7caad70c47755049fad68f9fc2f7064e8bc7cb862583e02cc2b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:12.380801 env[1251]: time="2025-07-15T11:30:12.358579492Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/apiserver:v3.30.2\" returns image reference \"sha256:5509118eed617ef04ca00f5a095bfd0a4cd1cf69edcfcf9bedf0edb641be51dd\"" Jul 15 11:30:12.447021 env[1251]: time="2025-07-15T11:30:12.446964053Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\"" Jul 15 11:30:12.452991 systemd[1]: run-containerd-runc-k8s.io-f4eb493ea84bf0f01ab0c34f123c0e6c2e2e45489afa2effa92d170c0584ede5-runc.eBflRk.mount: Deactivated successfully. Jul 15 11:30:12.457431 systemd[1]: Started cri-containerd-f4eb493ea84bf0f01ab0c34f123c0e6c2e2e45489afa2effa92d170c0584ede5.scope. Jul 15 11:30:12.467540 env[1251]: time="2025-07-15T11:30:12.459720520Z" level=info msg="CreateContainer within sandbox \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:30:12.478016 env[1251]: time="2025-07-15T11:30:12.477907269Z" level=info msg="CreateContainer within sandbox \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f\"" Jul 15 11:30:12.480597 env[1251]: time="2025-07-15T11:30:12.480573621Z" level=info msg="StartContainer for \"2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f\"" Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001976b0 a2=3c a3=7fd544213078 items=0 ppid=3950 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:12.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634656234393365613834626630663031616230633334663132336330 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit: BPF prog-id=221 op=LOAD Jul 15 11:30:12.482000 audit[4728]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001979d8 a2=78 a3=c0003bc228 items=0 ppid=3950 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:12.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634656234393365613834626630663031616230633334663132336330 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.482000 audit: BPF prog-id=222 op=LOAD Jul 15 11:30:12.482000 audit[4728]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c000197770 a2=78 a3=c0003bc278 items=0 ppid=3950 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:12.482000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634656234393365613834626630663031616230633334663132336330 Jul 15 11:30:12.482000 audit: BPF prog-id=222 op=UNLOAD Jul 15 11:30:12.483000 audit: BPF prog-id=221 op=UNLOAD Jul 15 11:30:12.483000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.483000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.483000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.483000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.483000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.483000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.483000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.483000 audit[4728]: AVC avc: denied { perfmon } for pid=4728 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.483000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.483000 audit[4728]: AVC avc: denied { bpf } for pid=4728 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.483000 audit: BPF prog-id=223 op=LOAD Jul 15 11:30:12.483000 audit[4728]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c000197c30 a2=78 a3=c0003bc308 items=0 ppid=3950 pid=4728 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:12.483000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6634656234393365613834626630663031616230633334663132336330 Jul 15 11:30:12.505408 env[1251]: time="2025-07-15T11:30:12.505382530Z" level=info msg="StartContainer for \"f4eb493ea84bf0f01ab0c34f123c0e6c2e2e45489afa2effa92d170c0584ede5\" returns successfully" Jul 15 11:30:12.510665 systemd[1]: Started cri-containerd-2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f.scope. Jul 15 11:30:12.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.524000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.524000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.524000 audit: BPF prog-id=224 op=LOAD Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4129 pid=4754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:12.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236323632383165653938333465616635613937373565336465336462 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4129 pid=4754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:12.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236323632383165653938333465616635613937373565336465336462 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit: BPF prog-id=225 op=LOAD Jul 15 11:30:12.525000 audit[4754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c00024cfb0 items=0 ppid=4129 pid=4754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:12.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236323632383165653938333465616635613937373565336465336462 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit: BPF prog-id=226 op=LOAD Jul 15 11:30:12.525000 audit[4754]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c00024cff8 items=0 ppid=4129 pid=4754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:12.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236323632383165653938333465616635613937373565336465336462 Jul 15 11:30:12.525000 audit: BPF prog-id=226 op=UNLOAD Jul 15 11:30:12.525000 audit: BPF prog-id=225 op=UNLOAD Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { perfmon } for pid=4754 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit[4754]: AVC avc: denied { bpf } for pid=4754 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:12.525000 audit: BPF prog-id=227 op=LOAD Jul 15 11:30:12.525000 audit[4754]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c00024d408 items=0 ppid=4129 pid=4754 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:12.525000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3236323632383165653938333465616635613937373565336465336462 Jul 15 11:30:12.556524 env[1251]: time="2025-07-15T11:30:12.556493448Z" level=info msg="StartContainer for \"2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f\" returns successfully" Jul 15 11:30:12.568031 kubelet[2123]: I0715 11:30:12.568000 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/df6aca5c-babc-41c6-a490-2c310dfee760-calico-apiserver-certs\") pod \"calico-apiserver-755674f4c-zdhbr\" (UID: \"df6aca5c-babc-41c6-a490-2c310dfee760\") " pod="calico-apiserver/calico-apiserver-755674f4c-zdhbr" Jul 15 11:30:12.568410 kubelet[2123]: I0715 11:30:12.568381 2123 reconciler_common.go:251] "operationExecutor.VerifyControllerAttachedVolume started for volume \"kube-api-access-nmthv\" (UniqueName: \"kubernetes.io/projected/df6aca5c-babc-41c6-a490-2c310dfee760-kube-api-access-nmthv\") pod \"calico-apiserver-755674f4c-zdhbr\" (UID: \"df6aca5c-babc-41c6-a490-2c310dfee760\") " pod="calico-apiserver/calico-apiserver-755674f4c-zdhbr" Jul 15 11:30:12.581649 systemd[1]: Created slice kubepods-besteffort-poddf6aca5c_babc_41c6_a490_2c310dfee760.slice. Jul 15 11:30:12.804000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:12.804000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c007d716b0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:30:12.804000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:30:12.805000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:12.805000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=75 a1=c0014ff320 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:30:12.805000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:30:12.809000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:12.809000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c007d716e0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:30:12.809000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:30:12.887713 env[1251]: time="2025-07-15T11:30:12.887683409Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755674f4c-zdhbr,Uid:df6aca5c-babc-41c6-a490-2c310dfee760,Namespace:calico-apiserver,Attempt:0,}" Jul 15 11:30:12.904000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:12.904000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c004888930 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:30:12.904000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:30:12.923000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:12.923000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c007d718f0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:30:12.923000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:30:12.923000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:12.923000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00f705f00 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:30:12.923000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:30:14.108196 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): eth0: link becomes ready Jul 15 11:30:14.154322 kernel: IPv6: ADDRCONF(NETDEV_CHANGE): calid16b77ae1eb: link becomes ready Jul 15 11:30:14.147283 systemd-networkd[1057]: calid16b77ae1eb: Link UP Jul 15 11:30:14.268203 env[1251]: time="2025-07-15T11:30:14.146112494Z" level=info msg="StopContainer for \"2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f\" with timeout 30 (s)" Jul 15 11:30:14.268203 env[1251]: time="2025-07-15T11:30:14.183468736Z" level=info msg="Stop container \"2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f\" with signal terminated" Jul 15 11:30:14.147464 systemd-networkd[1057]: calid16b77ae1eb: Gained carrier Jul 15 11:30:14.299000 audit: BPF prog-id=224 op=UNLOAD Jul 15 11:30:14.304000 audit: BPF prog-id=227 op=UNLOAD Jul 15 11:30:14.300632 systemd[1]: cri-containerd-2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f.scope: Deactivated successfully. Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.321 [INFO][4792] cni-plugin/plugin.go 340: Calico CNI found existing endpoint: &{{WorkloadEndpoint projectcalico.org/v3} {localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0 calico-apiserver-755674f4c- calico-apiserver df6aca5c-babc-41c6-a490-2c310dfee760 1079 0 2025-07-15 11:30:11 +0000 UTC map[apiserver:true app.kubernetes.io/name:calico-apiserver k8s-app:calico-apiserver pod-template-hash:755674f4c projectcalico.org/namespace:calico-apiserver projectcalico.org/orchestrator:k8s projectcalico.org/serviceaccount:calico-apiserver] map[] [] [] []} {k8s localhost calico-apiserver-755674f4c-zdhbr eth0 calico-apiserver [] [] [kns.calico-apiserver ksa.calico-apiserver.calico-apiserver] calid16b77ae1eb [] [] }} ContainerID="7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-zdhbr" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--zdhbr-" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.326 [INFO][4792] cni-plugin/k8s.go 74: Extracted identifiers for CmdAddK8s ContainerID="7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-zdhbr" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.754 [INFO][4810] ipam/ipam_plugin.go 225: Calico CNI IPAM request count IPv4=1 IPv6=0 ContainerID="7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" HandleID="k8s-pod-network.7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" Workload="localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.765 [INFO][4810] ipam/ipam_plugin.go 265: Auto assigning IP ContainerID="7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" HandleID="k8s-pod-network.7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" Workload="localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0" assignArgs=ipam.AutoAssignArgs{Num4:1, Num6:0, HandleID:(*string)(0xc000325410), Attrs:map[string]string{"namespace":"calico-apiserver", "node":"localhost", "pod":"calico-apiserver-755674f4c-zdhbr", "timestamp":"2025-07-15 11:30:13.754847099 +0000 UTC"}, Hostname:"localhost", IPv4Pools:[]net.IPNet{}, IPv6Pools:[]net.IPNet{}, MaxBlocksPerHost:0, HostReservedAttrIPv4s:(*ipam.HostReservedAttr)(nil), HostReservedAttrIPv6s:(*ipam.HostReservedAttr)(nil), IntendedUse:"Workload"} Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.765 [INFO][4810] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.766 [INFO][4810] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.766 [INFO][4810] ipam/ipam.go 110: Auto-assign 1 ipv4, 0 ipv6 addrs for host 'localhost' Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.843 [INFO][4810] ipam/ipam.go 691: Looking up existing affinities for host handle="k8s-pod-network.7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" host="localhost" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.897 [INFO][4810] ipam/ipam.go 394: Looking up existing affinities for host host="localhost" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.917 [INFO][4810] ipam/ipam.go 511: Trying affinity for 192.168.88.128/26 host="localhost" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.918 [INFO][4810] ipam/ipam.go 158: Attempting to load block cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.923 [INFO][4810] ipam/ipam.go 235: Affinity is confirmed and block has been loaded cidr=192.168.88.128/26 host="localhost" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.924 [INFO][4810] ipam/ipam.go 1220: Attempting to assign 1 addresses from block block=192.168.88.128/26 handle="k8s-pod-network.7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" host="localhost" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.926 [INFO][4810] ipam/ipam.go 1764: Creating new handle: k8s-pod-network.7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7 Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.936 [INFO][4810] ipam/ipam.go 1243: Writing block in order to claim IPs block=192.168.88.128/26 handle="k8s-pod-network.7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" host="localhost" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.944 [INFO][4810] ipam/ipam.go 1256: Successfully claimed IPs: [192.168.88.138/26] block=192.168.88.128/26 handle="k8s-pod-network.7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" host="localhost" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.944 [INFO][4810] ipam/ipam.go 878: Auto-assigned 1 out of 1 IPv4s: [192.168.88.138/26] handle="k8s-pod-network.7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" host="localhost" Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.944 [INFO][4810] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:14.358386 env[1251]: 2025-07-15 11:30:13.944 [INFO][4810] ipam/ipam_plugin.go 283: Calico CNI IPAM assigned addresses IPv4=[192.168.88.138/26] IPv6=[] ContainerID="7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" HandleID="k8s-pod-network.7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" Workload="localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0" Jul 15 11:30:14.345019 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f-rootfs.mount: Deactivated successfully. Jul 15 11:30:14.421911 env[1251]: 2025-07-15 11:30:13.993 [INFO][4792] cni-plugin/k8s.go 418: Populated endpoint ContainerID="7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-zdhbr" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0", GenerateName:"calico-apiserver-755674f4c-", Namespace:"calico-apiserver", SelfLink:"", UID:"df6aca5c-babc-41c6-a490-2c310dfee760", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755674f4c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"", Pod:"calico-apiserver-755674f4c-zdhbr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid16b77ae1eb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:14.421911 env[1251]: 2025-07-15 11:30:14.013 [INFO][4792] cni-plugin/k8s.go 419: Calico CNI using IPs: [192.168.88.138/32] ContainerID="7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-zdhbr" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0" Jul 15 11:30:14.421911 env[1251]: 2025-07-15 11:30:14.014 [INFO][4792] cni-plugin/dataplane_linux.go 69: Setting the host side veth name to calid16b77ae1eb ContainerID="7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-zdhbr" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0" Jul 15 11:30:14.421911 env[1251]: 2025-07-15 11:30:14.116 [INFO][4792] cni-plugin/dataplane_linux.go 508: Disabling IPv4 forwarding ContainerID="7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-zdhbr" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0" Jul 15 11:30:14.421911 env[1251]: 2025-07-15 11:30:14.125 [INFO][4792] cni-plugin/k8s.go 446: Added Mac, interface name, and active container ID to endpoint ContainerID="7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-zdhbr" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0" endpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0", GenerateName:"calico-apiserver-755674f4c-", Namespace:"calico-apiserver", SelfLink:"", UID:"df6aca5c-babc-41c6-a490-2c310dfee760", ResourceVersion:"1079", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 30, 11, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755674f4c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7", Pod:"calico-apiserver-755674f4c-zdhbr", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.138/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calid16b77ae1eb", MAC:"e2:4e:1a:af:be:43", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:14.421911 env[1251]: 2025-07-15 11:30:14.294 [INFO][4792] cni-plugin/k8s.go 532: Wrote updated endpoint to datastore ContainerID="7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7" Namespace="calico-apiserver" Pod="calico-apiserver-755674f4c-zdhbr" WorkloadEndpoint="localhost-k8s-calico--apiserver--755674f4c--zdhbr-eth0" Jul 15 11:30:14.470985 env[1251]: time="2025-07-15T11:30:14.470943457Z" level=info msg="shim disconnected" id=2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f Jul 15 11:30:14.471141 env[1251]: time="2025-07-15T11:30:14.471130334Z" level=warning msg="cleaning up after shim disconnected" id=2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f namespace=k8s.io Jul 15 11:30:14.471213 env[1251]: time="2025-07-15T11:30:14.471190841Z" level=info msg="cleaning up dead shim" Jul 15 11:30:14.481446 env[1251]: time="2025-07-15T11:30:14.481413226Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:30:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4841 runtime=io.containerd.runc.v2\n" Jul 15 11:30:14.490700 env[1251]: time="2025-07-15T11:30:14.490670084Z" level=info msg="StopContainer for \"2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f\" returns successfully" Jul 15 11:30:14.543174 env[1251]: time="2025-07-15T11:30:14.537213404Z" level=info msg="loading plugin \"io.containerd.event.v1.publisher\"..." runtime=io.containerd.runc.v2 type=io.containerd.event.v1 Jul 15 11:30:14.543174 env[1251]: time="2025-07-15T11:30:14.537284368Z" level=info msg="loading plugin \"io.containerd.internal.v1.shutdown\"..." runtime=io.containerd.runc.v2 type=io.containerd.internal.v1 Jul 15 11:30:14.543174 env[1251]: time="2025-07-15T11:30:14.537298011Z" level=info msg="loading plugin \"io.containerd.ttrpc.v1.task\"..." runtime=io.containerd.runc.v2 type=io.containerd.ttrpc.v1 Jul 15 11:30:14.543174 env[1251]: time="2025-07-15T11:30:14.537423638Z" level=info msg="starting signal loop" namespace=k8s.io path=/run/containerd/io.containerd.runtime.v2.task/k8s.io/7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7 pid=4860 runtime=io.containerd.runc.v2 Jul 15 11:30:14.572680 systemd[1]: run-containerd-runc-k8s.io-7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7-runc.unKOh0.mount: Deactivated successfully. Jul 15 11:30:14.618370 systemd[1]: Started cri-containerd-7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7.scope. Jul 15 11:30:14.628191 env[1251]: time="2025-07-15T11:30:14.628147237Z" level=info msg="StopPodSandbox for \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\"" Jul 15 11:30:14.628384 env[1251]: time="2025-07-15T11:30:14.628367856Z" level=info msg="Container to stop \"2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 15 11:30:14.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.630000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.630000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.631000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.631000 audit: BPF prog-id=228 op=LOAD Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=4860 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:14.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762383136626331363361653262303639313136633032336139653461 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=c items=0 ppid=4860 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:14.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762383136626331363361653262303639313136633032336139653461 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit: BPF prog-id=229 op=LOAD Jul 15 11:30:14.632000 audit[4871]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c0001d6770 items=0 ppid=4860 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:14.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762383136626331363361653262303639313136633032336139653461 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit: BPF prog-id=230 op=LOAD Jul 15 11:30:14.632000 audit[4871]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0001d67b8 items=0 ppid=4860 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:14.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762383136626331363361653262303639313136633032336139653461 Jul 15 11:30:14.632000 audit: BPF prog-id=230 op=UNLOAD Jul 15 11:30:14.632000 audit: BPF prog-id=229 op=UNLOAD Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { perfmon } for pid=4871 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit[4871]: AVC avc: denied { bpf } for pid=4871 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:14.632000 audit: BPF prog-id=231 op=LOAD Jul 15 11:30:14.632000 audit[4871]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0001d6bc8 items=0 ppid=4860 pid=4871 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:14.632000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3762383136626331363361653262303639313136633032336139653461 Jul 15 11:30:14.672000 audit: BPF prog-id=185 op=UNLOAD Jul 15 11:30:14.677000 audit: BPF prog-id=188 op=UNLOAD Jul 15 11:30:14.642129 systemd-resolved[1204]: Failed to determine the local hostname and LLMNR/mDNS names, ignoring: No such device or address Jul 15 11:30:14.782804 env[1251]: time="2025-07-15T11:30:14.697377702Z" level=info msg="RunPodSandbox for &PodSandboxMetadata{Name:calico-apiserver-755674f4c-zdhbr,Uid:df6aca5c-babc-41c6-a490-2c310dfee760,Namespace:calico-apiserver,Attempt:0,} returns sandbox id \"7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7\"" Jul 15 11:30:14.782804 env[1251]: time="2025-07-15T11:30:14.698637514Z" level=info msg="shim disconnected" id=4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6 Jul 15 11:30:14.782804 env[1251]: time="2025-07-15T11:30:14.698666357Z" level=warning msg="cleaning up after shim disconnected" id=4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6 namespace=k8s.io Jul 15 11:30:14.782804 env[1251]: time="2025-07-15T11:30:14.698672670Z" level=info msg="cleaning up dead shim" Jul 15 11:30:14.782804 env[1251]: time="2025-07-15T11:30:14.710092883Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:30:14Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=4913 runtime=io.containerd.runc.v2\n" Jul 15 11:30:14.673981 systemd[1]: cri-containerd-4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6.scope: Deactivated successfully. Jul 15 11:30:15.016000 audit[4945]: NETFILTER_CFG table=filter:128 family=2 entries=71 op=nft_register_chain pid=4945 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:15.016000 audit[4945]: SYSCALL arch=c000003e syscall=46 success=yes exit=33040 a0=3 a1=7ffdbd722e50 a2=0 a3=7ffdbd722e3c items=0 ppid=3463 pid=4945 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:15.016000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:15.071000 audit[4946]: NETFILTER_CFG table=filter:129 family=2 entries=10 op=nft_register_rule pid=4946 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:15.071000 audit[4946]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd2f1b8960 a2=0 a3=7ffd2f1b894c items=0 ppid=2231 pid=4946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:15.071000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:15.075000 audit[4946]: NETFILTER_CFG table=nat:130 family=2 entries=32 op=nft_register_rule pid=4946 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:15.075000 audit[4946]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffd2f1b8960 a2=0 a3=7ffd2f1b894c items=0 ppid=2231 pid=4946 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:15.075000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:15.353973 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6-rootfs.mount: Deactivated successfully. Jul 15 11:30:15.354060 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6-shm.mount: Deactivated successfully. Jul 15 11:30:15.647389 kubelet[2123]: I0715 11:30:15.413127 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-6db74f8486-272tj" podStartSLOduration=34.233462126 podStartE2EDuration="43.98178617s" podCreationTimestamp="2025-07-15 11:29:31 +0000 UTC" firstStartedPulling="2025-07-15 11:30:02.687109288 +0000 UTC m=+45.118659048" lastFinishedPulling="2025-07-15 11:30:12.43543333 +0000 UTC m=+54.866983092" observedRunningTime="2025-07-15 11:30:14.347345465 +0000 UTC m=+56.778895228" watchObservedRunningTime="2025-07-15 11:30:14.98178617 +0000 UTC m=+57.413335935" Jul 15 11:30:15.876473 systemd-networkd[1057]: calid16b77ae1eb: Gained IPv6LL Jul 15 11:30:16.086993 systemd-networkd[1057]: caliaf714ea874c: Link DOWN Jul 15 11:30:16.086998 systemd-networkd[1057]: caliaf714ea874c: Lost carrier Jul 15 11:30:16.523446 env[1251]: time="2025-07-15T11:30:16.523342983Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:16.541157 env[1251]: time="2025-07-15T11:30:16.531286382Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:16.541157 env[1251]: time="2025-07-15T11:30:16.539008607Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/kube-controllers:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:16.541157 env[1251]: time="2025-07-15T11:30:16.540098916Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:16.541157 env[1251]: time="2025-07-15T11:30:16.540331664Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\" returns image reference \"sha256:761b294e26556b58aabc85094a3d465389e6b141b7400aee732bd13400a6124a\"" Jul 15 11:30:16.703000 audit[4958]: NETFILTER_CFG table=filter:131 family=2 entries=59 op=nft_register_rule pid=4958 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:16.752072 kernel: kauditd_printk_skb: 190 callbacks suppressed Jul 15 11:30:16.758056 kernel: audit: type=1325 audit(1752579016.703:1487): table=filter:131 family=2 entries=59 op=nft_register_rule pid=4958 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:16.762156 kernel: audit: type=1300 audit(1752579016.703:1487): arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffea2825bd0 a2=0 a3=7ffea2825bbc items=0 ppid=3463 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:16.762263 kernel: audit: type=1327 audit(1752579016.703:1487): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:16.762297 kernel: audit: type=1325 audit(1752579016.704:1488): table=filter:132 family=2 entries=2 op=nft_unregister_chain pid=4958 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:16.762489 kernel: audit: type=1300 audit(1752579016.704:1488): arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffea2825bd0 a2=0 a3=55a0bd86c000 items=0 ppid=3463 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:16.762537 kernel: audit: type=1327 audit(1752579016.704:1488): proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:16.703000 audit[4958]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffea2825bd0 a2=0 a3=7ffea2825bbc items=0 ppid=3463 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:16.703000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:16.704000 audit[4958]: NETFILTER_CFG table=filter:132 family=2 entries=2 op=nft_unregister_chain pid=4958 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:30:16.704000 audit[4958]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffea2825bd0 a2=0 a3=55a0bd86c000 items=0 ppid=3463 pid=4958 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:16.704000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:30:16.881731 env[1251]: time="2025-07-15T11:30:16.881707765Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\"" Jul 15 11:30:17.007033 env[1251]: time="2025-07-15T11:30:17.007001348Z" level=info msg="CreateContainer within sandbox \"7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7\" for container &ContainerMetadata{Name:calico-apiserver,Attempt:0,}" Jul 15 11:30:17.058747 env[1251]: time="2025-07-15T11:30:17.058683615Z" level=info msg="CreateContainer within sandbox \"cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25\" for container &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,}" Jul 15 11:30:17.059280 env[1251]: time="2025-07-15T11:30:17.059258982Z" level=info msg="CreateContainer within sandbox \"7b816bc163ae2b069116c023a9e4a6259baa509f82b2b8ec5dc9e8b7ca0f4cf7\" for &ContainerMetadata{Name:calico-apiserver,Attempt:0,} returns container id \"050fc9c400c85b61c8d07c42316efce9631e3eef114b7f227ec7ccb16eccd9ba\"" Jul 15 11:30:17.088470 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4100408545.mount: Deactivated successfully. Jul 15 11:30:17.225365 env[1251]: time="2025-07-15T11:30:17.091448590Z" level=info msg="StartContainer for \"050fc9c400c85b61c8d07c42316efce9631e3eef114b7f227ec7ccb16eccd9ba\"" Jul 15 11:30:17.225365 env[1251]: time="2025-07-15T11:30:17.097753551Z" level=info msg="CreateContainer within sandbox \"cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25\" for &ContainerMetadata{Name:calico-kube-controllers,Attempt:0,} returns container id \"17d067fd24c22b7d111623073fa6bab401e042df034cd1cc18965f11b0fcf9f5\"" Jul 15 11:30:17.225365 env[1251]: time="2025-07-15T11:30:17.099549557Z" level=info msg="StartContainer for \"17d067fd24c22b7d111623073fa6bab401e042df034cd1cc18965f11b0fcf9f5\"" Jul 15 11:30:17.255364 systemd[1]: Started cri-containerd-050fc9c400c85b61c8d07c42316efce9631e3eef114b7f227ec7ccb16eccd9ba.scope. Jul 15 11:30:17.256254 systemd[1]: Started cri-containerd-17d067fd24c22b7d111623073fa6bab401e042df034cd1cc18965f11b0fcf9f5.scope. Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:16.051 [INFO][4937] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:16.067 [INFO][4937] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" iface="eth0" netns="/var/run/netns/cni-0d40b5a0-2b4e-3b8d-9dcf-2453fe5339e2" Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:16.076 [INFO][4937] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" iface="eth0" netns="/var/run/netns/cni-0d40b5a0-2b4e-3b8d-9dcf-2453fe5339e2" Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:16.097 [INFO][4937] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" after=28.098476ms iface="eth0" netns="/var/run/netns/cni-0d40b5a0-2b4e-3b8d-9dcf-2453fe5339e2" Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:16.097 [INFO][4937] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:16.097 [INFO][4937] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:16.866 [INFO][4950] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:16.871 [INFO][4950] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:16.871 [INFO][4950] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:17.237 [INFO][4950] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:17.237 [INFO][4950] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:17.239 [INFO][4950] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:17.269180 env[1251]: 2025-07-15 11:30:17.244 [INFO][4937] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:30:17.277538 env[1251]: time="2025-07-15T11:30:17.272163892Z" level=info msg="TearDown network for sandbox \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\" successfully" Jul 15 11:30:17.277538 env[1251]: time="2025-07-15T11:30:17.272184784Z" level=info msg="StopPodSandbox for \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\" returns successfully" Jul 15 11:30:17.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.290184 kernel: audit: type=1400 audit(1752579017.276:1489): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.290297 kernel: audit: type=1400 audit(1752579017.276:1490): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.290346 kernel: audit: type=1400 audit(1752579017.276:1491): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.290373 kernel: audit: audit_backlog=65 > audit_backlog_limit=64 Jul 15 11:30:17.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.276000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.276000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.276000 audit: BPF prog-id=232 op=LOAD Jul 15 11:30:17.279000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.279000 audit[4977]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c0001bdc48 a2=10 a3=1c items=0 ppid=4860 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:17.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035306663396334303063383562363163386430376334323331366566 Jul 15 11:30:17.279000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.279000 audit[4977]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001bd6b0 a2=3c a3=8 items=0 ppid=4860 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:17.279000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035306663396334303063383562363163386430376334323331366566 Jul 15 11:30:17.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.279000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.279000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.282000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.282000 audit: BPF prog-id=233 op=LOAD Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit: BPF prog-id=234 op=LOAD Jul 15 11:30:17.284000 audit[4977]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bd9d8 a2=78 a3=c0000243c0 items=0 ppid=4860 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:17.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035306663396334303063383562363163386430376334323331366566 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit: BPF prog-id=235 op=LOAD Jul 15 11:30:17.284000 audit[4977]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c0001bd770 a2=78 a3=c000024408 items=0 ppid=4860 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:17.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035306663396334303063383562363163386430376334323331366566 Jul 15 11:30:17.284000 audit: BPF prog-id=235 op=UNLOAD Jul 15 11:30:17.284000 audit: BPF prog-id=234 op=UNLOAD Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { perfmon } for pid=4977 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: AVC avc: denied { bpf } for pid=4977 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.284000 audit[4977]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001bdc30 a2=78 a3=c000024818 items=0 ppid=4860 pid=4977 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:17.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3035306663396334303063383562363163386430376334323331366566 Jul 15 11:30:17.284000 audit[4980]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000117c48 a2=10 a3=1c items=0 ppid=4278 pid=4980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:17.284000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137643036376664323463323262376431313136323330373366613662 Jul 15 11:30:17.285000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.285000 audit[4980]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001176b0 a2=3c a3=8 items=0 ppid=4278 pid=4980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:17.285000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137643036376664323463323262376431313136323330373366613662 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit: BPF prog-id=237 op=LOAD Jul 15 11:30:17.286000 audit[4980]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001179d8 a2=78 a3=c0003af060 items=0 ppid=4278 pid=4980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:17.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137643036376664323463323262376431313136323330373366613662 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.286000 audit: BPF prog-id=238 op=LOAD Jul 15 11:30:17.286000 audit[4980]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000117770 a2=78 a3=c0003af0a8 items=0 ppid=4278 pid=4980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:17.286000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137643036376664323463323262376431313136323330373366613662 Jul 15 11:30:17.288000 audit: BPF prog-id=238 op=UNLOAD Jul 15 11:30:17.288000 audit: BPF prog-id=237 op=UNLOAD Jul 15 11:30:17.288000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.288000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.288000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.288000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.288000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.288000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.288000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.288000 audit[4980]: AVC avc: denied { perfmon } for pid=4980 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.288000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.288000 audit[4980]: AVC avc: denied { bpf } for pid=4980 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:17.288000 audit: BPF prog-id=239 op=LOAD Jul 15 11:30:17.288000 audit[4980]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000117c30 a2=78 a3=c0003af4b8 items=0 ppid=4278 pid=4980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:17.288000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3137643036376664323463323262376431313136323330373366613662 Jul 15 11:30:17.321066 env[1251]: time="2025-07-15T11:30:17.319352845Z" level=info msg="StartContainer for \"050fc9c400c85b61c8d07c42316efce9631e3eef114b7f227ec7ccb16eccd9ba\" returns successfully" Jul 15 11:30:17.338564 env[1251]: time="2025-07-15T11:30:17.338520200Z" level=info msg="StartContainer for \"17d067fd24c22b7d111623073fa6bab401e042df034cd1cc18965f11b0fcf9f5\" returns successfully" Jul 15 11:30:17.374884 env[1251]: time="2025-07-15T11:30:17.374858404Z" level=info msg="StopPodSandbox for \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\"" Jul 15 11:30:17.709364 kubelet[2123]: I0715 11:30:17.709257 2123 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:30:18.059954 systemd[1]: run-netns-cni\x2d0d40b5a0\x2d2b4e\x2d3b8d\x2d9dcf\x2d2453fe5339e2.mount: Deactivated successfully. Jul 15 11:30:21.166524 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1514267811.mount: Deactivated successfully. Jul 15 11:30:21.642000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:21.642000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c00037cb40 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:30:21.642000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:21.651000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:21.651000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c00037cbc0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:30:21.651000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:21.668000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:21.668000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c00037cc00 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:30:21.668000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:21.670000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:30:21.670000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00037ccc0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:30:21.670000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:19.197 [WARNING][5041] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0", GenerateName:"calico-apiserver-6db74f8486-", Namespace:"calico-apiserver", SelfLink:"", UID:"cea21dcf-c636-4c32-9de2-493a871086ec", ResourceVersion:"1099", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6db74f8486", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6", Pod:"calico-apiserver-6db74f8486-272tj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaf714ea874c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:19.341 [INFO][5041] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:19.344 [INFO][5041] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" iface="eth0" netns="" Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:19.345 [INFO][5041] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:19.347 [INFO][5041] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:21.256 [INFO][5063] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:21.280 [INFO][5063] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:21.282 [INFO][5063] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:21.373 [WARNING][5063] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:21.374 [INFO][5063] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:21.375 [INFO][5063] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:21.688041 env[1251]: 2025-07-15 11:30:21.601 [INFO][5041] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:30:21.688041 env[1251]: time="2025-07-15T11:30:21.654149750Z" level=info msg="TearDown network for sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\" successfully" Jul 15 11:30:21.688041 env[1251]: time="2025-07-15T11:30:21.654168844Z" level=info msg="StopPodSandbox for \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\" returns successfully" Jul 15 11:30:23.174763 env[1251]: time="2025-07-15T11:30:23.174463614Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:23.182134 env[1251]: time="2025-07-15T11:30:23.182105025Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:23.184909 env[1251]: time="2025-07-15T11:30:23.184889260Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/goldmane:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:23.186894 env[1251]: time="2025-07-15T11:30:23.186640927Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/goldmane@sha256:a2b761fd93d824431ad93e59e8e670cdf00b478f4b532145297e1e67f2768305,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:23.187240 env[1251]: time="2025-07-15T11:30:23.187216538Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/goldmane:v3.30.2\" returns image reference \"sha256:dc4ea8b409b85d2f118bb4677ad3d34b57e7b01d488c9f019f7073bb58b2162b\"" Jul 15 11:30:24.104000 audit[5002]: AVC avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:30:24.131252 kernel: kauditd_printk_skb: 126 callbacks suppressed Jul 15 11:30:24.140476 kernel: audit: type=1400 audit(1752579024.104:1529): avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:30:24.142344 kernel: audit: type=1300 audit(1752579024.104:1529): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00074f160 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:30:24.142393 kernel: audit: type=1327 audit(1752579024.104:1529): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:30:24.104000 audit[5002]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c00074f160 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:30:24.104000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:30:24.391417 env[1251]: time="2025-07-15T11:30:24.390838871Z" level=info msg="StopPodSandbox for \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\"" Jul 15 11:30:24.462359 env[1251]: time="2025-07-15T11:30:24.461736233Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\"" Jul 15 11:30:24.614216 env[1251]: time="2025-07-15T11:30:24.614177137Z" level=info msg="CreateContainer within sandbox \"6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c\" for container &ContainerMetadata{Name:goldmane,Attempt:0,}" Jul 15 11:30:24.637785 env[1251]: time="2025-07-15T11:30:24.637691429Z" level=info msg="CreateContainer within sandbox \"6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c\" for &ContainerMetadata{Name:goldmane,Attempt:0,} returns container id \"ca94c2df2b1a8bef147e6bce17b6e793832287a4239ffe13a946e17b32e202a2\"" Jul 15 11:30:24.738012 env[1251]: time="2025-07-15T11:30:24.737834405Z" level=info msg="StartContainer for \"ca94c2df2b1a8bef147e6bce17b6e793832287a4239ffe13a946e17b32e202a2\"" Jul 15 11:30:24.783709 systemd[1]: run-containerd-runc-k8s.io-ca94c2df2b1a8bef147e6bce17b6e793832287a4239ffe13a946e17b32e202a2-runc.qpkoK5.mount: Deactivated successfully. Jul 15 11:30:24.799463 systemd[1]: Started cri-containerd-ca94c2df2b1a8bef147e6bce17b6e793832287a4239ffe13a946e17b32e202a2.scope. Jul 15 11:30:24.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.886213 kernel: audit: type=1400 audit(1752579024.831:1530): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.899864 kernel: audit: type=1400 audit(1752579024.831:1531): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.899945 kernel: audit: type=1400 audit(1752579024.831:1532): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.900002 kernel: audit: type=1400 audit(1752579024.831:1533): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.900028 kernel: audit: type=1400 audit(1752579024.831:1534): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.900060 kernel: audit: type=1400 audit(1752579024.831:1535): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.901172 kernel: audit: type=1400 audit(1752579024.831:1536): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit: BPF prog-id=240 op=LOAD Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[5104]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=4578 pid=5104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:24.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361393463326466326231613862656631343765366263653137623665 Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[5104]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=4578 pid=5104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:24.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361393463326466326231613862656631343765366263653137623665 Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.831000 audit: BPF prog-id=241 op=LOAD Jul 15 11:30:24.831000 audit[5104]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000294b40 items=0 ppid=4578 pid=5104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:24.831000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361393463326466326231613862656631343765366263653137623665 Jul 15 11:30:24.834000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.834000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.834000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.834000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.834000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.834000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.834000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.834000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.834000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.834000 audit: BPF prog-id=242 op=LOAD Jul 15 11:30:24.834000 audit[5104]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000294b88 items=0 ppid=4578 pid=5104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:24.834000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361393463326466326231613862656631343765366263653137623665 Jul 15 11:30:24.837000 audit: BPF prog-id=242 op=UNLOAD Jul 15 11:30:24.837000 audit: BPF prog-id=241 op=UNLOAD Jul 15 11:30:24.837000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.837000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.837000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.837000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.837000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.837000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.837000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.837000 audit[5104]: AVC avc: denied { perfmon } for pid=5104 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.837000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.837000 audit[5104]: AVC avc: denied { bpf } for pid=5104 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:30:24.837000 audit: BPF prog-id=243 op=LOAD Jul 15 11:30:24.837000 audit[5104]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c000294f98 items=0 ppid=4578 pid=5104 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:24.837000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6361393463326466326231613862656631343765366263653137623665 Jul 15 11:30:24.939263 env[1251]: time="2025-07-15T11:30:24.889953631Z" level=info msg="StartContainer for \"ca94c2df2b1a8bef147e6bce17b6e793832287a4239ffe13a946e17b32e202a2\" returns successfully" Jul 15 11:30:24.939311 kubelet[2123]: E0715 11:30:24.824168 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="6.981s" Jul 15 11:30:26.852000 audit[5153]: NETFILTER_CFG table=filter:133 family=2 entries=10 op=nft_register_rule pid=5153 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:26.852000 audit[5153]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffc7b89cae0 a2=0 a3=7ffc7b89cacc items=0 ppid=2231 pid=5153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:26.852000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:26.861000 audit[5153]: NETFILTER_CFG table=nat:134 family=2 entries=32 op=nft_register_rule pid=5153 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:30:26.861000 audit[5153]: SYSCALL arch=c000003e syscall=46 success=yes exit=10116 a0=3 a1=7ffc7b89cae0 a2=0 a3=7ffc7b89cacc items=0 ppid=2231 pid=5153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:26.861000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:27.271 [WARNING][5092] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0", GenerateName:"calico-apiserver-755674f4c-", Namespace:"calico-apiserver", SelfLink:"", UID:"3aa78136-135a-4dab-af0b-7b5a1b7f7b38", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755674f4c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad", Pod:"calico-apiserver-755674f4c-x5w6w", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53a2f79c10b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:27.416 [INFO][5092] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:27.418 [INFO][5092] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" iface="eth0" netns="" Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:27.420 [INFO][5092] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:27.421 [INFO][5092] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:29.257 [INFO][5157] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" HandleID="k8s-pod-network.85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:29.286 [INFO][5157] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:29.297 [INFO][5157] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:29.361 [WARNING][5157] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" HandleID="k8s-pod-network.85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:29.361 [INFO][5157] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" HandleID="k8s-pod-network.85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:29.373 [INFO][5157] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:29.717107 env[1251]: 2025-07-15 11:30:29.546 [INFO][5092] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:29.717107 env[1251]: time="2025-07-15T11:30:29.703392697Z" level=info msg="TearDown network for sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\" successfully" Jul 15 11:30:29.717107 env[1251]: time="2025-07-15T11:30:29.703454955Z" level=info msg="StopPodSandbox for \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\" returns successfully" Jul 15 11:30:30.815152 env[1251]: time="2025-07-15T11:30:30.815092428Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:30.819538 env[1251]: time="2025-07-15T11:30:30.819517516Z" level=info msg="ImageCreate event &ImageCreate{Name:sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:30.821292 env[1251]: time="2025-07-15T11:30:30.821265754Z" level=info msg="ImageUpdate event &ImageUpdate{Name:ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:30.823523 env[1251]: time="2025-07-15T11:30:30.823487272Z" level=info msg="ImageCreate event &ImageCreate{Name:ghcr.io/flatcar/calico/node-driver-registrar@sha256:8fec2de12dfa51bae89d941938a07af2598eb8bfcab55d0dded1d9c193d7b99f,Labels:map[string]string{io.cri-containerd.image: managed,},XXX_unrecognized:[],}" Jul 15 11:30:30.824701 env[1251]: time="2025-07-15T11:30:30.823728795Z" level=info msg="PullImage \"ghcr.io/flatcar/calico/node-driver-registrar:v3.30.2\" returns image reference \"sha256:9e48822a4fe26f4ed9231b361fdd1357ea3567f1fc0a8db4d616622fe570a866\"" Jul 15 11:30:32.179673 kubelet[2123]: I0715 11:30:26.548700 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-apiserver/calico-apiserver-755674f4c-zdhbr" podStartSLOduration=14.665049596 podStartE2EDuration="14.665049596s" podCreationTimestamp="2025-07-15 11:30:11 +0000 UTC" firstStartedPulling="0001-01-01 00:00:00 +0000 UTC" lastFinishedPulling="0001-01-01 00:00:00 +0000 UTC" observedRunningTime="2025-07-15 11:30:25.342095011 +0000 UTC m=+67.773644783" watchObservedRunningTime="2025-07-15 11:30:25.665049596 +0000 UTC m=+68.096599365" Jul 15 11:30:33.303840 env[1251]: time="2025-07-15T11:30:33.303635077Z" level=info msg="RemovePodSandbox for \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\"" Jul 15 11:30:33.303840 env[1251]: time="2025-07-15T11:30:33.303664783Z" level=info msg="Forcibly stopping sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\"" Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:35.513 [WARNING][5197] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0", GenerateName:"calico-apiserver-755674f4c-", Namespace:"calico-apiserver", SelfLink:"", UID:"3aa78136-135a-4dab-af0b-7b5a1b7f7b38", ResourceVersion:"1047", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 32, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"755674f4c", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"b5488312fee301dc7b5bdc05fb9723ec3a88cc322846e103fbb94fca11bed4ad", Pod:"calico-apiserver-755674f4c-x5w6w", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.136/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"cali53a2f79c10b", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:35.526 [INFO][5197] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:35.531 [INFO][5197] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" iface="eth0" netns="" Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:35.531 [INFO][5197] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:35.531 [INFO][5197] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:36.566 [INFO][5205] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" HandleID="k8s-pod-network.85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:36.600 [INFO][5205] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:36.611 [INFO][5205] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:36.866 [WARNING][5205] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" HandleID="k8s-pod-network.85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:36.866 [INFO][5205] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" HandleID="k8s-pod-network.85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Workload="localhost-k8s-calico--apiserver--755674f4c--x5w6w-eth0" Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:36.894 [INFO][5205] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:30:37.067496 env[1251]: 2025-07-15 11:30:36.968 [INFO][5197] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6" Jul 15 11:30:37.067496 env[1251]: time="2025-07-15T11:30:37.053810403Z" level=info msg="TearDown network for sandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\" successfully" Jul 15 11:30:37.152262 env[1251]: time="2025-07-15T11:30:37.081775728Z" level=info msg="RemovePodSandbox \"85cb5f73f4b03ffda6bf02ae9e3d7797e304d00fc6d07bf00f0d6b14cb93c3c6\" returns successfully" Jul 15 11:30:53.898824 kernel: kauditd_printk_skb: 56 callbacks suppressed Jul 15 11:30:53.954252 kernel: audit: type=1130 audit(1752579053.896:1550): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.108:22-121.179.150.231:57644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.896000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.108:22-121.179.150.231:57644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:53.894565 systemd[1]: Started sshd@7-139.178.70.108:22-121.179.150.231:57644.service. Jul 15 11:30:54.027847 kubelet[2123]: I0715 11:30:48.309358 2123 request.go:752] "Waited before sending request" delay="2.541233165s" reason="client-side throttling, not priority and fairness" verb="POST" URL="https://139.178.70.108:6443/api/v1/namespaces/calico-system/events" Jul 15 11:30:54.344478 sshd[5224]: Connection reset by 121.179.150.231 port 57644 [preauth] Jul 15 11:30:54.381869 kernel: audit: type=1131 audit(1752579054.371:1551): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.108:22-121.179.150.231:57644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:54.371000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@7-139.178.70.108:22-121.179.150.231:57644 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:54.362630 systemd[1]: sshd@7-139.178.70.108:22-121.179.150.231:57644.service: Deactivated successfully. Jul 15 11:30:55.638974 systemd[1]: Started sshd@8-139.178.70.108:22-147.75.109.163:46008.service. Jul 15 11:30:55.815161 kernel: audit: type=1130 audit(1752579055.643:1552): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.108:22-147.75.109.163:46008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:55.643000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.108:22-147.75.109.163:46008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:30:56.507000 audit[5233]: USER_ACCT pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:30:56.592654 kernel: audit: type=1101 audit(1752579056.507:1553): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:30:56.623551 kernel: audit: type=1103 audit(1752579056.554:1554): pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:30:56.623607 kernel: audit: type=1006 audit(1752579056.559:1555): pid=5233 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=10 res=1 Jul 15 11:30:56.623624 kernel: audit: type=1300 audit(1752579056.559:1555): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff078f0590 a2=3 a3=0 items=0 ppid=1 pid=5233 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:56.628705 kernel: audit: type=1327 audit(1752579056.559:1555): proctitle=737368643A20636F7265205B707269765D Jul 15 11:30:56.554000 audit[5233]: CRED_ACQ pid=5233 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:30:56.559000 audit[5233]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fff078f0590 a2=3 a3=0 items=0 ppid=1 pid=5233 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=10 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:30:56.559000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:30:56.570842 sshd[5233]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:30:56.742455 sshd[5233]: Accepted publickey for core from 147.75.109.163 port 46008 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:30:56.862143 systemd-logind[1241]: New session 10 of user core. Jul 15 11:30:56.869666 systemd[1]: Started session-10.scope. Jul 15 11:30:56.955546 kernel: audit: type=1105 audit(1752579056.921:1556): pid=5233 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:30:56.990390 kernel: audit: type=1103 audit(1752579056.958:1557): pid=5236 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:30:56.921000 audit[5233]: USER_START pid=5233 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:30:56.958000 audit[5236]: CRED_ACQ pid=5236 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:31:07.836000 audit[4635]: AVC avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:31:08.919409 kernel: audit: type=1400 audit(1752579067.836:1558): avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:31:09.159012 kernel: audit: type=1300 audit(1752579067.836:1558): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001684640 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:31:09.191846 kernel: audit: type=1400 audit(1752579067.846:1559): avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:31:09.191902 kernel: audit: type=1300 audit(1752579067.846:1559): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0007689a0 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:31:09.201306 kernel: audit: type=1327 audit(1752579067.846:1559): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:31:09.211481 kernel: audit: type=1327 audit(1752579067.836:1558): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:31:07.836000 audit[4635]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001684640 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:31:07.846000 audit[4455]: AVC avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:31:07.846000 audit[4455]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0007689a0 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:31:07.846000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:31:07.836000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:31:12.516000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:12.965492 kernel: audit: type=1400 audit(1752579072.516:1560): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:12.978736 kernel: audit: type=1300 audit(1752579072.516:1560): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002984090 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:31:12.982548 kernel: audit: type=1327 audit(1752579072.516:1560): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:12.984995 kernel: audit: type=1400 audit(1752579072.614:1561): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:12.516000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002984090 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:31:13.049310 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 15 11:31:13.051641 kernel: audit: type=1400 audit(1752579073.007:1562): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:13.053505 kernel: audit: type=1300 audit(1752579073.007:1562): arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c009eb75c0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:31:13.053820 kernel: audit: type=1327 audit(1752579073.007:1562): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:31:12.516000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:12.614000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:12.614000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0030e6080 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:31:12.614000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:13.007000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:13.066213 kernel: audit: type=1400 audit(1752579073.054:1563): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:13.066247 kernel: audit: type=1300 audit(1752579073.054:1563): arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c009eb75f0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:31:13.066264 kernel: audit: type=1327 audit(1752579073.054:1563): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:31:13.007000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c009eb75c0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:31:13.069610 kernel: audit: type=1400 audit(1752579073.065:1564): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:13.073497 kernel: audit: type=1300 audit(1752579073.065:1564): arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c00dcb5ec0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:31:13.007000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:31:13.054000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:13.054000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c009eb75f0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:31:13.054000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:31:13.065000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:13.077019 kernel: audit: type=1327 audit(1752579073.065:1564): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:31:13.065000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c00dcb5ec0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:31:13.065000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:31:13.272000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:13.272000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c00a03cc80 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:31:13.278699 kernel: audit: type=1400 audit(1752579073.272:1565): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:13.272000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:31:13.276000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:13.276000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c009eb77a0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:31:13.276000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:31:13.294000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:13.294000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c009eb7830 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:31:13.294000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:31:21.718000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:21.844536 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 15 11:31:21.852631 kernel: audit: type=1400 audit(1752579081.718:1568): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:21.855639 kernel: audit: type=1300 audit(1752579081.718:1568): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0030e7c80 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:31:21.855674 kernel: audit: type=1327 audit(1752579081.718:1568): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:21.858078 kernel: audit: type=1400 audit(1752579081.750:1569): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:21.858116 kernel: audit: type=1300 audit(1752579081.750:1569): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003307200 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:31:21.858139 kernel: audit: type=1327 audit(1752579081.750:1569): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:21.858156 kernel: audit: type=1400 audit(1752579081.775:1570): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:21.860901 kernel: audit: type=1300 audit(1752579081.775:1570): arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c003307220 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:31:21.860927 kernel: audit: type=1327 audit(1752579081.775:1570): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:21.860947 kernel: audit: type=1400 audit(1752579081.775:1571): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:21.718000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0030e7c80 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:31:21.718000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:21.750000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:21.750000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c003307200 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:31:21.750000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:21.775000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:21.775000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c003307220 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:31:21.775000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:21.775000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:31:21.775000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c003307240 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:31:21.775000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:31:24.417000 audit[5002]: AVC avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:31:24.417000 audit[5002]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0015770c0 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:31:24.417000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:31:25.865533 systemd[1]: Started sshd@9-139.178.70.108:22-80.94.95.117:65105.service. Jul 15 11:31:25.894000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.108:22-80.94.95.117:65105 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:26.690264 sshd[5258]: kex_exchange_identification: Connection closed by remote host Jul 15 11:31:26.690264 sshd[5258]: Connection closed by 80.94.95.117 port 65105 Jul 15 11:31:26.717000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@9-139.178.70.108:22-80.94.95.117:65105 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:31:26.710673 systemd[1]: sshd@9-139.178.70.108:22-80.94.95.117:65105.service: Deactivated successfully. Jul 15 11:31:37.836000 audit[5289]: NETFILTER_CFG table=filter:135 family=2 entries=10 op=nft_register_rule pid=5289 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:38.138239 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:31:38.148149 kernel: audit: type=1325 audit(1752579097.836:1575): table=filter:135 family=2 entries=10 op=nft_register_rule pid=5289 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:38.148368 kernel: audit: type=1300 audit(1752579097.836:1575): arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd6041acf0 a2=0 a3=7ffd6041acdc items=0 ppid=2231 pid=5289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.148412 kernel: audit: type=1327 audit(1752579097.836:1575): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:38.148441 kernel: audit: type=1325 audit(1752579097.870:1576): table=nat:136 family=2 entries=60 op=nft_unregister_chain pid=5289 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:38.148478 kernel: audit: type=1300 audit(1752579097.870:1576): arch=c000003e syscall=46 success=yes exit=16116 a0=3 a1=7ffd6041acf0 a2=0 a3=7ffd6041acdc items=0 ppid=2231 pid=5289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:38.148509 kernel: audit: type=1327 audit(1752579097.870:1576): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:37.836000 audit[5289]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd6041acf0 a2=0 a3=7ffd6041acdc items=0 ppid=2231 pid=5289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.836000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:37.870000 audit[5289]: NETFILTER_CFG table=nat:136 family=2 entries=60 op=nft_unregister_chain pid=5289 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:37.870000 audit[5289]: SYSCALL arch=c000003e syscall=46 success=yes exit=16116 a0=3 a1=7ffd6041acf0 a2=0 a3=7ffd6041acdc items=0 ppid=2231 pid=5289 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:37.870000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:40.843000 audit[5292]: NETFILTER_CFG table=filter:137 family=2 entries=12 op=nft_register_rule pid=5292 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:41.391019 kernel: audit: type=1325 audit(1752579100.843:1577): table=filter:137 family=2 entries=12 op=nft_register_rule pid=5292 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:41.454431 kernel: audit: type=1300 audit(1752579100.843:1577): arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffce5e47260 a2=0 a3=7ffce5e4724c items=0 ppid=2231 pid=5292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:41.463660 kernel: audit: type=1327 audit(1752579100.843:1577): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:41.473450 kernel: audit: type=1325 audit(1752579100.857:1578): table=nat:138 family=2 entries=34 op=nft_unregister_chain pid=5292 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:40.843000 audit[5292]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffce5e47260 a2=0 a3=7ffce5e4724c items=0 ppid=2231 pid=5292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.843000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:40.857000 audit[5292]: NETFILTER_CFG table=nat:138 family=2 entries=34 op=nft_unregister_chain pid=5292 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:40.857000 audit[5292]: SYSCALL arch=c000003e syscall=46 success=yes exit=6284 a0=3 a1=7ffce5e47260 a2=0 a3=7ffce5e4724c items=0 ppid=2231 pid=5292 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:40.857000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:41.453000 audit[5294]: NETFILTER_CFG table=filter:139 family=2 entries=14 op=nft_register_rule pid=5294 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:41.453000 audit[5294]: SYSCALL arch=c000003e syscall=46 success=yes exit=5248 a0=3 a1=7ffcbb157b00 a2=0 a3=7ffcbb157aec items=0 ppid=2231 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:41.453000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:41.480000 audit[5294]: NETFILTER_CFG table=nat:140 family=2 entries=20 op=nft_register_rule pid=5294 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:41.480000 audit[5294]: SYSCALL arch=c000003e syscall=46 success=yes exit=5772 a0=3 a1=7ffcbb157b00 a2=0 a3=7ffcbb157aec items=0 ppid=2231 pid=5294 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:41.480000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:44.425000 audit[5296]: NETFILTER_CFG table=filter:141 family=2 entries=17 op=nft_register_rule pid=5296 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:44.968295 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 15 11:31:45.014438 kernel: audit: type=1325 audit(1752579104.425:1581): table=filter:141 family=2 entries=17 op=nft_register_rule pid=5296 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:45.014574 kernel: audit: type=1300 audit(1752579104.425:1581): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffdd5db6780 a2=0 a3=7ffdd5db676c items=0 ppid=2231 pid=5296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:45.019737 kernel: audit: type=1327 audit(1752579104.425:1581): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:45.019826 kernel: audit: type=1325 audit(1752579104.437:1582): table=nat:142 family=2 entries=35 op=nft_unregister_chain pid=5296 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:45.019859 kernel: audit: type=1300 audit(1752579104.437:1582): arch=c000003e syscall=46 success=yes exit=4236 a0=3 a1=7ffdd5db6780 a2=0 a3=7ffdd5db676c items=0 ppid=2231 pid=5296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:45.019890 kernel: audit: type=1327 audit(1752579104.437:1582): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:44.425000 audit[5296]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffdd5db6780 a2=0 a3=7ffdd5db676c items=0 ppid=2231 pid=5296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:44.425000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:44.437000 audit[5296]: NETFILTER_CFG table=nat:142 family=2 entries=35 op=nft_unregister_chain pid=5296 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:44.437000 audit[5296]: SYSCALL arch=c000003e syscall=46 success=yes exit=4236 a0=3 a1=7ffdd5db6780 a2=0 a3=7ffdd5db676c items=0 ppid=2231 pid=5296 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:44.437000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:48.258000 audit[5298]: NETFILTER_CFG table=filter:143 family=2 entries=21 op=nft_register_rule pid=5298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:48.529898 kernel: audit: type=1325 audit(1752579108.258:1583): table=filter:143 family=2 entries=21 op=nft_register_rule pid=5298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:48.538018 kernel: audit: type=1300 audit(1752579108.258:1583): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffdb76a42d0 a2=0 a3=7ffdb76a42bc items=0 ppid=2231 pid=5298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:48.538067 kernel: audit: type=1327 audit(1752579108.258:1583): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:48.538097 kernel: audit: type=1325 audit(1752579108.272:1584): table=nat:144 family=2 entries=19 op=nft_unregister_chain pid=5298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:48.258000 audit[5298]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7ffdb76a42d0 a2=0 a3=7ffdb76a42bc items=0 ppid=2231 pid=5298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:48.258000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:31:48.272000 audit[5298]: NETFILTER_CFG table=nat:144 family=2 entries=19 op=nft_unregister_chain pid=5298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:31:48.272000 audit[5298]: SYSCALL arch=c000003e syscall=46 success=yes exit=2956 a0=3 a1=7ffdb76a42d0 a2=0 a3=0 items=0 ppid=2231 pid=5298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:31:48.272000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:32:08.028320 kernel: kauditd_printk_skb: 2 callbacks suppressed Jul 15 11:32:08.151892 kernel: audit: type=1400 audit(1752579128.009:1585): avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:32:08.161891 kernel: audit: type=1300 audit(1752579128.009:1585): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000353160 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:32:08.163127 kernel: audit: type=1327 audit(1752579128.009:1585): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:32:08.165684 kernel: audit: type=1400 audit(1752579128.057:1586): avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:32:08.168596 kernel: audit: type=1300 audit(1752579128.057:1586): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0016854c0 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:32:08.169854 kernel: audit: type=1327 audit(1752579128.057:1586): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:32:08.009000 audit[4455]: AVC avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:32:08.009000 audit[4455]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000353160 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:32:08.009000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:32:08.057000 audit[4635]: AVC avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:32:08.057000 audit[4635]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0016854c0 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:32:08.057000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:32:13.023000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.493657 kernel: audit: type=1400 audit(1752579133.023:1587): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.507903 kernel: audit: type=1300 audit(1752579133.023:1587): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014fc140 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:32:13.510094 kernel: audit: type=1327 audit(1752579133.023:1587): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:13.510125 kernel: audit: type=1400 audit(1752579133.050:1588): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.510149 kernel: audit: type=1300 audit(1752579133.050:1588): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001541170 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:32:13.511951 kernel: audit: type=1327 audit(1752579133.050:1588): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:13.511978 kernel: audit: type=1400 audit(1752579133.420:1589): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.517617 kernel: audit: type=1300 audit(1752579133.420:1589): arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c0113ead20 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:32:13.524455 kernel: audit: type=1327 audit(1752579133.420:1589): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:32:13.527954 kernel: audit: type=1400 audit(1752579133.503:1590): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.023000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0014fc140 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:32:13.023000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:13.050000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.050000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c001541170 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:32:13.050000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:13.420000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.420000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7f a1=c0113ead20 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:32:13.420000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:32:13.503000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.503000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c011957e90 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:32:13.503000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:32:13.510000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.510000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=80 a1=c0115d3540 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:32:13.510000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:32:13.523000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.523000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c01388d140 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:32:13.523000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:32:13.570000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.570000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7c a1=c01388d1a0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:32:13.570000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:32:13.812000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:13.812000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7e a1=c0137a8060 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:32:13.812000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:32:17.853792 sshd[5233]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:17.904000 audit[5233]: USER_END pid=5233 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:17.906000 audit[5233]: CRED_DISP pid=5233 uid=0 auid=500 ses=10 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:17.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@8-139.178.70.108:22-147.75.109.163:46008 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:17.911947 systemd[1]: sshd@8-139.178.70.108:22-147.75.109.163:46008.service: Deactivated successfully. Jul 15 11:32:17.918832 systemd[1]: session-10.scope: Deactivated successfully. Jul 15 11:32:17.918929 systemd[1]: session-10.scope: Consumed 6.403s CPU time. Jul 15 11:32:17.926191 systemd-logind[1241]: Session 10 logged out. Waiting for processes to exit. Jul 15 11:32:17.983038 systemd-logind[1241]: Removed session 10. Jul 15 11:32:19.520796 kubelet[2123]: I0715 11:32:19.520053 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.917784 kubelet[2123]: I0715 11:32:19.913189 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.962940 kubelet[2123]: I0715 11:32:19.917850 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"cni-config\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.962940 kubelet[2123]: I0715 11:32:19.946077 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.973009 kubelet[2123]: I0715 11:32:19.972986 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-backend-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.973147 kubelet[2123]: I0715 11:32:19.973131 2123 reflector.go:556] "Warning: watch ended with error" reflector="pkg/kubelet/config/apiserver.go:66" type="*v1.Pod" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.973232 kubelet[2123]: I0715 11:32:19.973221 2123 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.973308 kubelet[2123]: I0715 11:32:19.973298 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"tigera-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.974849 kubelet[2123]: I0715 11:32:19.973375 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.974849 kubelet[2123]: I0715 11:32:19.973401 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.974849 kubelet[2123]: I0715 11:32:19.973418 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.974849 kubelet[2123]: I0715 11:32:19.973436 2123 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.978119 kubelet[2123]: I0715 11:32:19.973453 2123 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.978209 kubelet[2123]: I0715 11:32:19.978195 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kubernetes-services-endpoint\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.978297 kubelet[2123]: I0715 11:32:19.978284 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"typha-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:19.980029 kubelet[2123]: I0715 11:32:19.978438 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:20.145657 kubelet[2123]: W0715 11:32:19.476804 2123 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@7-139.178.70.108:22-121.179.150.231:57644.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@7-139.178.70.108:22-121.179.150.231:57644.service: no such file or directory Jul 15 11:32:20.896833 kubelet[2123]: I0715 11:32:20.886860 2123 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/cea21dcf-c636-4c32-9de2-493a871086ec-calico-apiserver-certs\") pod \"cea21dcf-c636-4c32-9de2-493a871086ec\" (UID: \"cea21dcf-c636-4c32-9de2-493a871086ec\") " Jul 15 11:32:22.031000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:22.179475 kernel: kauditd_printk_skb: 17 callbacks suppressed Jul 15 11:32:22.192715 kernel: audit: type=1400 audit(1752579142.031:1598): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:22.196502 kernel: audit: type=1400 audit(1752579142.031:1599): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:22.196578 kernel: audit: type=1300 audit(1752579142.031:1599): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013a2800 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:32:22.196611 kernel: audit: type=1327 audit(1752579142.031:1599): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:22.196636 kernel: audit: type=1300 audit(1752579142.031:1598): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0014fca80 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:32:22.196658 kernel: audit: type=1327 audit(1752579142.031:1598): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:22.198425 kernel: audit: type=1400 audit(1752579142.110:1600): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:22.198472 kernel: audit: type=1300 audit(1752579142.110:1600): arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c0014fcac0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:32:22.199895 kernel: audit: type=1327 audit(1752579142.110:1600): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:22.201176 kernel: audit: type=1400 audit(1752579142.187:1601): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:22.031000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:22.031000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0013a2800 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:32:22.031000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:22.031000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0014fca80 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:32:22.031000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:22.110000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:22.110000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c0014fcac0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:32:22.110000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:22.187000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:32:22.187000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0014fccc0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:32:22.187000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:32:22.939000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.108:22-147.75.109.163:56948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:22.937791 systemd[1]: Started sshd@10-139.178.70.108:22-147.75.109.163:56948.service. Jul 15 11:32:23.264000 audit[5354]: USER_ACCT pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:23.267000 audit[5354]: CRED_ACQ pid=5354 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:23.267000 audit[5354]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffeab9d0bd0 a2=3 a3=0 items=0 ppid=1 pid=5354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=11 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:23.267000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:23.300400 sshd[5354]: Accepted publickey for core from 147.75.109.163 port 56948 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:32:23.274035 sshd[5354]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:23.336300 systemd-logind[1241]: New session 11 of user core. Jul 15 11:32:23.337874 systemd[1]: Started session-11.scope. Jul 15 11:32:23.343000 audit[5354]: USER_START pid=5354 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:23.344000 audit[5356]: CRED_ACQ pid=5356 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:24.480000 audit[5002]: AVC avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:32:24.480000 audit[5002]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000ffe040 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:32:24.480000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:32:27.137050 kubelet[2123]: I0715 11:32:19.902267 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:27.997238 kubelet[2123]: E0715 11:32:23.329361 2123 controller.go:195] "Failed to update lease" err="context deadline exceeded" Jul 15 11:32:30.633251 kubelet[2123]: I0715 11:32:24.813693 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"coredns\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:33.624121 kubelet[2123]: I0715 11:32:30.015151 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"node-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:33.757322 kubelet[2123]: I0715 11:32:32.703134 2123 request.go:752] "Waited before sending request" delay="2.465633037s" reason="client-side throttling, not priority and fairness" verb="GET" URL="https://139.178.70.108:6443/api/v1/namespaces/tigera-operator/configmaps?fieldSelector=metadata.name%3Dkubernetes-services-endpoint&resourceVersion=694" Jul 15 11:32:34.412100 sshd[5354]: pam_unix(sshd:session): session closed for user core Jul 15 11:32:34.434117 kubelet[2123]: I0715 11:32:34.418889 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"calico-apiserver-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:34.485000 audit[5354]: USER_END pid=5354 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:34.500294 kernel: kauditd_printk_skb: 13 callbacks suppressed Jul 15 11:32:34.505361 kernel: audit: type=1106 audit(1752579154.485:1609): pid=5354 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:34.508702 kernel: audit: type=1104 audit(1752579154.491:1610): pid=5354 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:34.491000 audit[5354]: CRED_DISP pid=5354 uid=0 auid=500 ses=11 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:34.512168 systemd[1]: sshd@10-139.178.70.108:22-147.75.109.163:56948.service: Deactivated successfully. Jul 15 11:32:34.520674 kernel: audit: type=1131 audit(1752579154.514:1611): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.108:22-147.75.109.163:56948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:34.514000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@10-139.178.70.108:22-147.75.109.163:56948 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:34.519756 systemd[1]: session-11.scope: Deactivated successfully. Jul 15 11:32:34.519844 systemd[1]: session-11.scope: Consumed 1.749s CPU time. Jul 15 11:32:34.522680 systemd-logind[1241]: Session 11 logged out. Waiting for processes to exit. Jul 15 11:32:34.529980 systemd-logind[1241]: Removed session 11. Jul 15 11:32:34.536723 kubelet[2123]: I0715 11:32:34.536699 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-proxy\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:34.575233 kubelet[2123]: W0715 11:32:33.130447 2123 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@8-139.178.70.108:22-147.75.109.163:46008.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@8-139.178.70.108:22-147.75.109.163:46008.service: no such file or directory Jul 15 11:32:34.586699 kubelet[2123]: W0715 11:32:34.586668 2123 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-10.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-10.scope: no such file or directory Jul 15 11:32:34.720365 env[1251]: time="2025-07-15T11:32:34.720280367Z" level=info msg="StopPodSandbox for \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\"" Jul 15 11:32:34.736127 kubelet[2123]: W0715 11:32:34.736103 2123 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@9-139.178.70.108:22-80.94.95.117:65105.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@9-139.178.70.108:22-80.94.95.117:65105.service: no such file or directory Jul 15 11:32:34.736434 kubelet[2123]: W0715 11:32:34.736421 2123 watcher.go:93] Error while processing event ("/sys/fs/cgroup/system.slice/system-sshd.slice/sshd@10-139.178.70.108:22-147.75.109.163:56948.service": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/system.slice/system-sshd.slice/sshd@10-139.178.70.108:22-147.75.109.163:56948.service: no such file or directory Jul 15 11:32:34.736515 kubelet[2123]: W0715 11:32:34.736499 2123 watcher.go:93] Error while processing event ("/sys/fs/cgroup/user.slice/user-500.slice/session-11.scope": 0x40000100 == IN_CREATE|IN_ISDIR): inotify_add_watch /sys/fs/cgroup/user.slice/user-500.slice/session-11.scope: no such file or directory Jul 15 11:32:34.860623 systemd[1]: run-containerd-runc-k8s.io-17d067fd24c22b7d111623073fa6bab401e042df034cd1cc18965f11b0fcf9f5-runc.acrYbJ.mount: Deactivated successfully. Jul 15 11:32:36.726147 kubelet[2123]: I0715 11:32:35.169732 2123 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-xtblq\" (UniqueName: \"kubernetes.io/projected/cea21dcf-c636-4c32-9de2-493a871086ec-kube-api-access-xtblq\") pod \"cea21dcf-c636-4c32-9de2-493a871086ec\" (UID: \"cea21dcf-c636-4c32-9de2-493a871086ec\") " Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:36.332 [WARNING][5413] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"4b4746b6-c971-43e9-be79-e903661bbbbc", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c", Pod:"goldmane-768f4c5c69-pjcl6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali95ef4decc35", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:36.435 [INFO][5413] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:36.440 [INFO][5413] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" iface="eth0" netns="" Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:36.440 [INFO][5413] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:36.440 [INFO][5413] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:36.959 [INFO][5446] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" HandleID="k8s-pod-network.4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:36.969 [INFO][5446] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:36.971 [INFO][5446] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:37.171 [WARNING][5446] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" HandleID="k8s-pod-network.4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:37.171 [INFO][5446] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" HandleID="k8s-pod-network.4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:37.172 [INFO][5446] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:37.196861 env[1251]: 2025-07-15 11:32:37.181 [INFO][5413] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:32:37.215699 env[1251]: time="2025-07-15T11:32:37.197730028Z" level=info msg="TearDown network for sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\" successfully" Jul 15 11:32:37.215699 env[1251]: time="2025-07-15T11:32:37.197749876Z" level=info msg="StopPodSandbox for \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\" returns successfully" Jul 15 11:32:37.723655 systemd[1]: var-lib-kubelet-pods-cea21dcf\x2dc636\x2d4c32\x2d9de2\x2d493a871086ec-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 15 11:32:39.250802 kubelet[2123]: I0715 11:32:39.243629 2123 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Node" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:32:39.291505 kubelet[2123]: I0715 11:32:39.016688 2123 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/cea21dcf-c636-4c32-9de2-493a871086ec-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "cea21dcf-c636-4c32-9de2-493a871086ec" (UID: "cea21dcf-c636-4c32-9de2-493a871086ec"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 15 11:32:39.309039 kubelet[2123]: I0715 11:32:39.309024 2123 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/cea21dcf-c636-4c32-9de2-493a871086ec-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 15 11:32:39.322833 env[1251]: time="2025-07-15T11:32:39.322547020Z" level=info msg="CreateContainer within sandbox \"f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe\" for container &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,}" Jul 15 11:32:39.322833 env[1251]: time="2025-07-15T11:32:39.322609882Z" level=info msg="RemovePodSandbox for \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\"" Jul 15 11:32:39.322833 env[1251]: time="2025-07-15T11:32:39.322624316Z" level=info msg="Forcibly stopping sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\"" Jul 15 11:32:39.381079 env[1251]: time="2025-07-15T11:32:39.380737612Z" level=info msg="CreateContainer within sandbox \"f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe\" for &ContainerMetadata{Name:csi-node-driver-registrar,Attempt:0,} returns container id \"5eef74b0130eab571763190b51c05a8c49fd1d7b46fb32d687a6f5c006041733\"" Jul 15 11:32:39.428368 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3059170273.mount: Deactivated successfully. Jul 15 11:32:39.474898 kernel: audit: type=1130 audit(1752579159.464:1612): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.108:22-147.75.109.163:46992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:39.464000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.108:22-147.75.109.163:46992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:32:39.463205 systemd[1]: Started sshd@11-139.178.70.108:22-147.75.109.163:46992.service. Jul 15 11:32:39.707000 audit[5492]: USER_ACCT pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:39.718311 kernel: audit: type=1101 audit(1752579159.707:1613): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:39.718374 kernel: audit: type=1103 audit(1752579159.713:1614): pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:39.719230 kernel: audit: type=1006 audit(1752579159.713:1615): pid=5492 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=12 res=1 Jul 15 11:32:39.713000 audit[5492]: CRED_ACQ pid=5492 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:39.723085 kernel: audit: type=1300 audit(1752579159.713:1615): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1a9a6d40 a2=3 a3=0 items=0 ppid=1 pid=5492 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:39.713000 audit[5492]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe1a9a6d40 a2=3 a3=0 items=0 ppid=1 pid=5492 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=12 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:39.763672 kernel: audit: type=1327 audit(1752579159.713:1615): proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:39.713000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:32:39.763788 sshd[5492]: Accepted publickey for core from 147.75.109.163 port 46992 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:32:39.764043 kubelet[2123]: E0715 11:32:39.748084 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2m13.754s" Jul 15 11:32:39.723956 sshd[5492]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:32:39.798643 systemd[1]: var-lib-kubelet-pods-cea21dcf\x2dc636\x2d4c32\x2d9de2\x2d493a871086ec-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2dxtblq.mount: Deactivated successfully. Jul 15 11:32:39.808910 systemd-logind[1241]: New session 12 of user core. Jul 15 11:32:39.809662 systemd[1]: Started session-12.scope. Jul 15 11:32:39.816000 audit[5492]: USER_START pid=5492 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:39.824935 kernel: audit: type=1105 audit(1752579159.816:1616): pid=5492 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:39.824972 kernel: audit: type=1103 audit(1752579159.816:1617): pid=5498 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:39.816000 audit[5498]: CRED_ACQ pid=5498 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.252 [WARNING][5487] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0", GenerateName:"goldmane-768f4c5c69-", Namespace:"calico-system", SelfLink:"", UID:"4b4746b6-c971-43e9-be79-e903661bbbbc", ResourceVersion:"1009", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"goldmane", "k8s-app":"goldmane", "pod-template-hash":"768f4c5c69", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"goldmane"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"6647570c602aeaae9832317549d44d8bc599c95637959ad909803d3bfbe0c80c", Pod:"goldmane-768f4c5c69-pjcl6", Endpoint:"eth0", ServiceAccountName:"goldmane", IPNetworks:[]string{"192.168.88.137/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.goldmane"}, InterfaceName:"cali95ef4decc35", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.266 [INFO][5487] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.266 [INFO][5487] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" iface="eth0" netns="" Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.267 [INFO][5487] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.267 [INFO][5487] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.713 [INFO][5507] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" HandleID="k8s-pod-network.4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.718 [INFO][5507] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.719 [INFO][5507] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.765 [WARNING][5507] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" HandleID="k8s-pod-network.4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.765 [INFO][5507] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" HandleID="k8s-pod-network.4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Workload="localhost-k8s-goldmane--768f4c5c69--pjcl6-eth0" Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.766 [INFO][5507] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:40.780720 env[1251]: 2025-07-15 11:32:40.773 [INFO][5487] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9" Jul 15 11:32:40.780720 env[1251]: time="2025-07-15T11:32:40.780860175Z" level=info msg="TearDown network for sandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\" successfully" Jul 15 11:32:40.844121 env[1251]: time="2025-07-15T11:32:40.788231991Z" level=info msg="RemovePodSandbox \"4175d457c44337b9205042bf30695a96748fd77ae2dd4860dd6dda2b3a26e5c9\" returns successfully" Jul 15 11:32:52.026030 env[1251]: time="2025-07-15T11:32:52.013771903Z" level=info msg="StopPodSandbox for \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\"" Jul 15 11:32:52.026030 env[1251]: time="2025-07-15T11:32:52.013791566Z" level=info msg="StartContainer for \"5eef74b0130eab571763190b51c05a8c49fd1d7b46fb32d687a6f5c006041733\"" Jul 15 11:32:52.115245 systemd[1]: Started cri-containerd-5eef74b0130eab571763190b51c05a8c49fd1d7b46fb32d687a6f5c006041733.scope. Jul 15 11:32:52.135000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.327346 kernel: audit: type=1400 audit(1752579172.135:1618): avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.332416 kernel: audit: type=1300 audit(1752579172.135:1618): arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f02f1d3da88 items=0 ppid=3950 pid=5529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:52.340059 kernel: audit: type=1327 audit(1752579172.135:1618): proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565656637346230313330656162353731373633313930623531633035 Jul 15 11:32:52.340086 kernel: audit: type=1400 audit(1752579172.138:1619): avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.340107 kernel: audit: type=1400 audit(1752579172.138:1619): avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.346112 kernel: audit: type=1400 audit(1752579172.138:1619): avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.346140 kernel: audit: type=1400 audit(1752579172.138:1619): avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.346161 kernel: audit: type=1400 audit(1752579172.138:1619): avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.346174 kernel: audit: type=1400 audit(1752579172.138:1619): avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.346189 kernel: audit: type=1400 audit(1752579172.138:1619): avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.135000 audit[5529]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=0 a1=c0001bd6b0 a2=3c a3=7f02f1d3da88 items=0 ppid=3950 pid=5529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:52.135000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565656637346230313330656162353731373633313930623531633035 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit: BPF prog-id=244 op=LOAD Jul 15 11:32:52.138000 audit[5529]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bd9d8 a2=78 a3=c00022d038 items=0 ppid=3950 pid=5529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:52.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565656637346230313330656162353731373633313930623531633035 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit: BPF prog-id=245 op=LOAD Jul 15 11:32:52.138000 audit[5529]: SYSCALL arch=c000003e syscall=321 success=yes exit=17 a0=5 a1=c0001bd770 a2=78 a3=c00022d088 items=0 ppid=3950 pid=5529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:52.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565656637346230313330656162353731373633313930623531633035 Jul 15 11:32:52.138000 audit: BPF prog-id=245 op=UNLOAD Jul 15 11:32:52.138000 audit: BPF prog-id=244 op=UNLOAD Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { perfmon } for pid=5529 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit[5529]: AVC avc: denied { bpf } for pid=5529 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:32:52.138000 audit: BPF prog-id=246 op=LOAD Jul 15 11:32:52.138000 audit[5529]: SYSCALL arch=c000003e syscall=321 success=yes exit=15 a0=5 a1=c0001bdc30 a2=78 a3=c00022d118 items=0 ppid=3950 pid=5529 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:32:52.138000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3565656637346230313330656162353731373633313930623531633035 Jul 15 11:32:52.444715 env[1251]: time="2025-07-15T11:32:52.288749282Z" level=info msg="StartContainer for \"5eef74b0130eab571763190b51c05a8c49fd1d7b46fb32d687a6f5c006041733\" returns successfully" Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:54.937 [WARNING][5548] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0", GenerateName:"calico-apiserver-6db74f8486-", Namespace:"calico-apiserver", SelfLink:"", UID:"cea21dcf-c636-4c32-9de2-493a871086ec", ResourceVersion:"1099", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6db74f8486", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6", Pod:"calico-apiserver-6db74f8486-272tj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaf714ea874c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:54.950 [INFO][5548] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:54.951 [INFO][5548] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" iface="eth0" netns="" Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:54.954 [INFO][5548] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:54.954 [INFO][5548] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:55.365 [INFO][5569] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:55.379 [INFO][5569] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:55.380 [INFO][5569] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:55.507 [WARNING][5569] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:55.507 [INFO][5569] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:55.509 [INFO][5569] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:32:55.564884 env[1251]: 2025-07-15 11:32:55.537 [INFO][5548] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:32:55.564884 env[1251]: time="2025-07-15T11:32:55.562189019Z" level=info msg="TearDown network for sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\" successfully" Jul 15 11:32:55.564884 env[1251]: time="2025-07-15T11:32:55.562211571Z" level=info msg="StopPodSandbox for \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\" returns successfully" Jul 15 11:33:06.636175 sshd[5492]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:06.846536 kernel: kauditd_printk_skb: 33 callbacks suppressed Jul 15 11:33:06.848945 kernel: audit: type=1106 audit(1752579186.737:1624): pid=5492 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:06.852123 kernel: audit: type=1104 audit(1752579186.742:1625): pid=5492 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:06.852195 kernel: audit: type=1131 audit(1752579186.751:1626): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.108:22-147.75.109.163:46992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:06.737000 audit[5492]: USER_END pid=5492 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:06.742000 audit[5492]: CRED_DISP pid=5492 uid=0 auid=500 ses=12 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:06.751000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@11-139.178.70.108:22-147.75.109.163:46992 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:06.751285 systemd[1]: sshd@11-139.178.70.108:22-147.75.109.163:46992.service: Deactivated successfully. Jul 15 11:33:06.758572 systemd[1]: session-12.scope: Deactivated successfully. Jul 15 11:33:06.758718 systemd[1]: session-12.scope: Consumed 3.752s CPU time. Jul 15 11:33:06.761195 systemd-logind[1241]: Session 12 logged out. Waiting for processes to exit. Jul 15 11:33:06.807407 systemd-logind[1241]: Removed session 12. Jul 15 11:33:08.100000 audit[4635]: AVC avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:33:08.175896 kernel: audit: type=1400 audit(1752579188.100:1628): avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:33:08.181064 kernel: audit: type=1400 audit(1752579188.100:1627): avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:33:08.181109 kernel: audit: type=1300 audit(1752579188.100:1628): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001684020 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:33:08.188191 kernel: audit: type=1327 audit(1752579188.100:1628): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:33:08.197684 kernel: audit: type=1300 audit(1752579188.100:1627): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0006ebc40 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:33:08.208174 kernel: audit: type=1327 audit(1752579188.100:1627): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:33:08.100000 audit[4455]: AVC avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:33:08.100000 audit[4635]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001684020 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:33:08.100000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:33:08.100000 audit[4455]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0006ebc40 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:33:08.100000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:33:11.700490 systemd[1]: Started sshd@12-139.178.70.108:22-147.75.109.163:32840.service. Jul 15 11:33:12.020936 kernel: audit: type=1130 audit(1752579191.709:1629): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.108:22-147.75.109.163:32840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:11.709000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.108:22-147.75.109.163:32840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:12.068789 kubelet[2123]: I0715 11:32:49.634667 2123 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/cea21dcf-c636-4c32-9de2-493a871086ec-kube-api-access-xtblq" (OuterVolumeSpecName: "kube-api-access-xtblq") pod "cea21dcf-c636-4c32-9de2-493a871086ec" (UID: "cea21dcf-c636-4c32-9de2-493a871086ec"). InnerVolumeSpecName "kube-api-access-xtblq". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 15 11:33:12.491000 audit[5601]: USER_ACCT pid=5601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:12.517736 kernel: audit: type=1101 audit(1752579192.491:1630): pid=5601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:12.522141 kernel: audit: type=1103 audit(1752579192.497:1631): pid=5601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:12.522191 kernel: audit: type=1006 audit(1752579192.501:1632): pid=5601 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=13 res=1 Jul 15 11:33:12.523374 kernel: audit: type=1300 audit(1752579192.501:1632): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd70173870 a2=3 a3=0 items=0 ppid=1 pid=5601 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:12.524748 kernel: audit: type=1327 audit(1752579192.501:1632): proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:12.497000 audit[5601]: CRED_ACQ pid=5601 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:12.501000 audit[5601]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd70173870 a2=3 a3=0 items=0 ppid=1 pid=5601 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=13 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:12.501000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:12.517094 sshd[5601]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:12.568563 sshd[5601]: Accepted publickey for core from 147.75.109.163 port 32840 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:33:12.880969 systemd-logind[1241]: New session 13 of user core. Jul 15 11:33:12.964247 kernel: audit: type=1105 audit(1752579192.911:1633): pid=5601 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:12.964320 kernel: audit: type=1103 audit(1752579192.917:1634): pid=5603 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:12.911000 audit[5601]: USER_START pid=5601 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:12.917000 audit[5603]: CRED_ACQ pid=5603 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:12.893254 systemd[1]: Started session-13.scope. Jul 15 11:33:13.424000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:13.549696 kernel: audit: type=1400 audit(1752579193.424:1635): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:13.557533 kernel: audit: type=1400 audit(1752579193.424:1636): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:13.557620 kernel: audit: type=1300 audit(1752579193.424:1635): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00262a300 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:33:13.424000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:13.424000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00262a300 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:33:13.424000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:13.424000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002db4100 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:33:13.424000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:13.808000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:13.808000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c010475500 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:33:13.808000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:33:13.915000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:13.915000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0109a4500 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:33:13.915000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:33:13.952000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:13.952000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0104755c0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:33:13.952000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:33:13.967000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:13.967000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0108fc5a0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:33:13.967000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:33:13.987000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:13.987000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c00fc3b840 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:33:13.987000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:33:14.005000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:14.005000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c010475650 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:33:14.005000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:33:22.200000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:22.371481 kernel: kauditd_printk_skb: 21 callbacks suppressed Jul 15 11:33:22.382038 kernel: audit: type=1400 audit(1752579202.200:1643): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:22.382169 kernel: audit: type=1300 audit(1752579202.200:1643): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002db44c0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:33:22.382207 kernel: audit: type=1327 audit(1752579202.200:1643): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:22.382249 kernel: audit: type=1400 audit(1752579202.255:1644): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:22.382284 kernel: audit: type=1300 audit(1752579202.255:1644): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002db4520 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:33:22.382312 kernel: audit: type=1327 audit(1752579202.255:1644): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:22.382384 kernel: audit: type=1400 audit(1752579202.259:1645): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:22.383064 kernel: audit: type=1300 audit(1752579202.259:1645): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002b28420 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:33:22.383105 kernel: audit: type=1327 audit(1752579202.259:1645): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:22.385074 kernel: audit: type=1400 audit(1752579202.290:1646): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:22.200000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c002db44c0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:33:22.200000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:22.255000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:22.255000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002db4520 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:33:22.255000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:22.259000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:22.259000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002b28420 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:33:22.259000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:22.290000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:33:22.290000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c002db4540 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:33:22.290000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:33:24.541000 audit[5002]: AVC avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:33:24.541000 audit[5002]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0015766c0 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:33:24.541000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:33:43.633148 sshd[5601]: pam_unix(sshd:session): session closed for user core Jul 15 11:33:43.811357 kernel: kauditd_printk_skb: 5 callbacks suppressed Jul 15 11:33:43.817833 kernel: audit: type=1106 audit(1752579223.684:1648): pid=5601 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:43.821078 kernel: audit: type=1104 audit(1752579223.687:1649): pid=5601 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:43.821111 kernel: audit: type=1131 audit(1752579223.750:1650): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.108:22-147.75.109.163:32840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:43.684000 audit[5601]: USER_END pid=5601 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:43.687000 audit[5601]: CRED_DISP pid=5601 uid=0 auid=500 ses=13 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:43.750000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@12-139.178.70.108:22-147.75.109.163:32840 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:43.744180 systemd[1]: sshd@12-139.178.70.108:22-147.75.109.163:32840.service: Deactivated successfully. Jul 15 11:33:43.755473 systemd[1]: session-13.scope: Deactivated successfully. Jul 15 11:33:43.755568 systemd[1]: session-13.scope: Consumed 3.858s CPU time. Jul 15 11:33:43.766174 systemd-logind[1241]: Session 13 logged out. Waiting for processes to exit. Jul 15 11:33:43.803845 systemd-logind[1241]: Removed session 13. Jul 15 11:33:43.927283 kubelet[2123]: I0715 11:33:43.921033 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.942143 kubelet[2123]: I0715 11:33:43.942126 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"cni-config\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.950133 kubelet[2123]: I0715 11:33:43.950117 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-apiserver\"/\"calico-apiserver-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.950230 kubelet[2123]: I0715 11:33:43.950220 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kubernetes-services-endpoint\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.950318 kubelet[2123]: I0715 11:33:43.950307 2123 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.CSIDriver" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.950405 kubelet[2123]: I0715 11:33:43.950396 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.950466 kubelet[2123]: I0715 11:33:43.950457 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.950529 kubelet[2123]: I0715 11:33:43.950519 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"tigera-operator\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.950592 kubelet[2123]: I0715 11:33:43.950583 2123 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.951254 kubelet[2123]: I0715 11:33:43.951244 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.951333 kubelet[2123]: I0715 11:33:43.951316 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"coredns\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.951401 kubelet[2123]: I0715 11:33:43.951390 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-ca-bundle\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:43.951469 kubelet[2123]: I0715 11:33:43.951454 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"node-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:44.093987 kubelet[2123]: I0715 11:33:44.093960 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"typha-certs\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:44.109662 kubelet[2123]: I0715 11:33:44.109635 2123 reflector.go:556] "Warning: watch ended with error" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:44.125395 kubelet[2123]: I0715 11:33:44.125371 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-proxy\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:44.152233 kubelet[2123]: I0715 11:33:44.152199 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"whisker-backend-key-pair\"" type="*v1.Secret" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:44.182647 kubelet[2123]: I0715 11:33:44.182582 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"calico-system\"/\"goldmane\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:44.182647 kubelet[2123]: I0715 11:33:44.182607 2123 reflector.go:556] "Warning: watch ended with error" reflector="object-\"kube-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" err="an error on the server (\"unable to decode an event from the watch stream: http2: client connection lost\") has prevented the request from succeeding" Jul 15 11:33:44.428257 kubelet[2123]: I0715 11:33:44.428226 2123 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-xtblq\" (UniqueName: \"kubernetes.io/projected/cea21dcf-c636-4c32-9de2-493a871086ec-kube-api-access-xtblq\") on node \"localhost\" DevicePath \"\"" Jul 15 11:33:44.710265 kubelet[2123]: I0715 11:33:44.700492 2123 status_manager.go:919] "Failed to update status for pod" pod="calico-system/calico-kube-controllers-79f4f75899-956zh" err="failed to patch status \"{\\\"metadata\\\":{\\\"uid\\\":\\\"987cfc20-a8f4-4673-935d-50967ef2f542\\\"},\\\"status\\\":{\\\"$setElementOrder/conditions\\\":[{\\\"type\\\":\\\"PodReadyToStartContainers\\\"},{\\\"type\\\":\\\"Initialized\\\"},{\\\"type\\\":\\\"Ready\\\"},{\\\"type\\\":\\\"ContainersReady\\\"},{\\\"type\\\":\\\"PodScheduled\\\"}],\\\"conditions\\\":[{\\\"lastTransitionTime\\\":\\\"2025-07-15T11:30:24Z\\\",\\\"status\\\":\\\"True\\\",\\\"type\\\":\\\"PodReadyToStartContainers\\\"}],\\\"containerStatuses\\\":[{\\\"containerID\\\":\\\"containerd://17d067fd24c22b7d111623073fa6bab401e042df034cd1cc18965f11b0fcf9f5\\\",\\\"image\\\":\\\"ghcr.io/flatcar/calico/kube-controllers:v3.30.2\\\",\\\"imageID\\\":\\\"ghcr.io/flatcar/calico/kube-controllers@sha256:5d3ecdec3cbbe8f7009077102e35e8a2141161b59c548cf3f97829177677cbce\\\",\\\"lastState\\\":{},\\\"name\\\":\\\"calico-kube-controllers\\\",\\\"ready\\\":false,\\\"resources\\\":{},\\\"restartCount\\\":0,\\\"started\\\":true,\\\"state\\\":{\\\"running\\\":{\\\"startedAt\\\":\\\"2025-07-15T11:30:17Z\\\"}},\\\"volumeMounts\\\":[{\\\"mountPath\\\":\\\"/etc/pki/tls/certs\\\",\\\"name\\\":\\\"tigera-ca-bundle\\\",\\\"readOnly\\\":true,\\\"recursiveReadOnly\\\":\\\"Disabled\\\"},{\\\"mountPath\\\":\\\"/etc/pki/tls/cert.pem\\\",\\\"name\\\":\\\"tigera-ca-bundle\\\",\\\"readOnly\\\":true,\\\"recursiveReadOnly\\\":\\\"Disabled\\\"},{\\\"mountPath\\\":\\\"/var/run/secrets/kubernetes.io/serviceaccount\\\",\\\"name\\\":\\\"kube-api-access-wtztq\\\",\\\"readOnly\\\":true,\\\"recursiveReadOnly\\\":\\\"Disabled\\\"}]}],\\\"phase\\\":\\\"Running\\\",\\\"podIP\\\":\\\"192.168.88.134\\\",\\\"podIPs\\\":[{\\\"ip\\\":\\\"192.168.88.134\\\"}]}}\" for pod \"calico-system\"/\"calico-kube-controllers-79f4f75899-956zh\": Patch \"https://139.178.70.108:6443/api/v1/namespaces/calico-system/pods/calico-kube-controllers-79f4f75899-956zh/status\": http2: client connection lost" Jul 15 11:33:48.651323 systemd[1]: Started sshd@13-139.178.70.108:22-147.75.109.163:42108.service. Jul 15 11:33:48.742726 kernel: audit: type=1130 audit(1752579228.651:1651): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.108:22-147.75.109.163:42108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:48.651000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.108:22-147.75.109.163:42108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:33:48.759626 env[1251]: time="2025-07-15T11:33:48.740564698Z" level=info msg="RemovePodSandbox for \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\"" Jul 15 11:33:48.759626 env[1251]: time="2025-07-15T11:33:48.740590740Z" level=info msg="Forcibly stopping sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\"" Jul 15 11:33:48.935361 kernel: audit: type=1101 audit(1752579228.930:1652): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:48.930000 audit[5691]: USER_ACCT pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:48.954888 kernel: audit: type=1103 audit(1752579228.936:1653): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:48.954941 kernel: audit: type=1006 audit(1752579228.936:1654): pid=5691 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=14 res=1 Jul 15 11:33:48.954961 kernel: audit: type=1300 audit(1752579228.936:1654): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd21f72af0 a2=3 a3=0 items=0 ppid=1 pid=5691 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:48.954980 kernel: audit: type=1327 audit(1752579228.936:1654): proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:48.936000 audit[5691]: CRED_ACQ pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:48.936000 audit[5691]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd21f72af0 a2=3 a3=0 items=0 ppid=1 pid=5691 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=14 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:33:48.936000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:33:49.131204 sshd[5691]: Accepted publickey for core from 147.75.109.163 port 42108 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:33:48.944891 sshd[5691]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:33:49.195879 systemd-logind[1241]: New session 14 of user core. Jul 15 11:33:49.201000 audit[5691]: USER_START pid=5691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:49.203000 audit[5707]: CRED_ACQ pid=5707 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:49.196947 systemd[1]: Started session-14.scope. Jul 15 11:33:49.216747 kernel: audit: type=1105 audit(1752579229.201:1655): pid=5691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:49.217812 kernel: audit: type=1103 audit(1752579229.203:1656): pid=5707 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:50.007 [WARNING][5701] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0", GenerateName:"calico-apiserver-6db74f8486-", Namespace:"calico-apiserver", SelfLink:"", UID:"cea21dcf-c636-4c32-9de2-493a871086ec", ResourceVersion:"1099", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6db74f8486", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6", Pod:"calico-apiserver-6db74f8486-272tj", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"caliaf714ea874c", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:50.031 [INFO][5701] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:50.032 [INFO][5701] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" iface="eth0" netns="" Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:50.032 [INFO][5701] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:50.032 [INFO][5701] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:50.548 [INFO][5717] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:50.553 [INFO][5717] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:50.555 [INFO][5717] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:51.733 [WARNING][5717] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:51.747 [INFO][5717] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" HandleID="k8s-pod-network.ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:51.759 [INFO][5717] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:33:51.809029 env[1251]: 2025-07-15 11:33:51.783 [INFO][5701] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a" Jul 15 11:33:51.809029 env[1251]: time="2025-07-15T11:33:51.802382109Z" level=info msg="TearDown network for sandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\" successfully" Jul 15 11:33:51.942442 env[1251]: time="2025-07-15T11:33:51.829766159Z" level=info msg="RemovePodSandbox \"ad7a4e9750ba9c0091d5dcf011dcef73e8ea74cad09a14a672f4874eedc64a2a\" returns successfully" Jul 15 11:34:08.169000 audit[4455]: AVC avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:34:08.263955 kernel: audit: type=1400 audit(1752579248.169:1657): avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:34:08.269849 kernel: audit: type=1300 audit(1752579248.169:1657): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a603c0 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:34:08.271066 kernel: audit: type=1327 audit(1752579248.169:1657): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:34:08.271725 kernel: audit: type=1400 audit(1752579248.169:1658): avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:34:08.271749 kernel: audit: type=1300 audit(1752579248.169:1658): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001685420 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:34:08.271768 kernel: audit: type=1327 audit(1752579248.169:1658): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:34:08.169000 audit[4455]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a603c0 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:34:08.169000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:34:08.169000 audit[4635]: AVC avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:34:08.169000 audit[4635]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c001685420 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:34:08.169000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:34:13.602000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:14.131535 kernel: audit: type=1400 audit(1752579253.602:1659): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:14.151080 kernel: audit: type=1300 audit(1752579253.602:1659): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0030e7ae0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:34:14.151134 kernel: audit: type=1327 audit(1752579253.602:1659): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:14.152461 kernel: audit: type=1400 audit(1752579253.602:1660): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:14.152487 kernel: audit: type=1300 audit(1752579253.602:1660): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002d60bd0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:34:14.152505 kernel: audit: type=1327 audit(1752579253.602:1660): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:14.152521 kernel: audit: type=1400 audit(1752579254.092:1661): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:14.154458 kernel: audit: type=1300 audit(1752579254.092:1661): arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c008b62f80 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:34:14.159916 kernel: audit: type=1327 audit(1752579254.092:1661): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:34:14.164784 kernel: audit: type=1400 audit(1752579254.108:1662): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:13.602000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0030e7ae0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:34:13.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:13.602000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:13.602000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c002d60bd0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:34:13.602000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:14.092000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:14.092000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c008b62f80 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:34:14.092000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:34:14.108000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:14.108000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c013e02120 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:34:14.108000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:34:14.122000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:14.122000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c013e02150 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:34:14.122000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:34:14.194000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:14.194000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c010a76160 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:34:14.194000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:34:14.421000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:14.421000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=69 a1=c013e02240 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:34:14.421000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:34:14.429000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:14.429000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c013e02270 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:34:14.429000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:34:22.352000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:22.491047 kernel: kauditd_printk_skb: 14 callbacks suppressed Jul 15 11:34:22.504213 kernel: audit: type=1400 audit(1752579262.352:1667): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:22.505907 kernel: audit: type=1300 audit(1752579262.352:1667): arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0017edea0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:34:22.505948 kernel: audit: type=1327 audit(1752579262.352:1667): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:22.511814 kernel: audit: type=1400 audit(1752579262.353:1668): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:22.511863 kernel: audit: type=1300 audit(1752579262.353:1668): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0030e7e80 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:34:22.512481 kernel: audit: type=1327 audit(1752579262.353:1668): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:22.513724 kernel: audit: type=1400 audit(1752579262.388:1669): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:22.513752 kernel: audit: type=1300 audit(1752579262.388:1669): arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0030e7ea0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:34:22.513768 kernel: audit: type=1327 audit(1752579262.388:1669): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:22.513783 kernel: audit: type=1400 audit(1752579262.411:1670): avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:22.352000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c0017edea0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:34:22.352000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:22.353000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:22.353000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0030e7e80 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:34:22.353000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:22.388000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:22.388000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=b a1=c0030e7ea0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:34:22.388000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:22.411000 audit[1964]: AVC avc: denied { watch } for pid=1964 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:34:22.411000 audit[1964]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c0030e7ec0 a2=fc6 a3=0 items=0 ppid=1797 pid=1964 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:34:22.411000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:34:24.610000 audit[5002]: AVC avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:34:24.610000 audit[5002]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0015767e0 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:34:24.610000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:34:46.718409 systemd[1]: cri-containerd-6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7.scope: Deactivated successfully. Jul 15 11:34:46.997597 kernel: kauditd_printk_skb: 5 callbacks suppressed Jul 15 11:34:47.000849 kernel: audit: type=1334 audit(1752579286.730:1672): prog-id=73 op=UNLOAD Jul 15 11:34:47.004607 kernel: audit: type=1334 audit(1752579286.730:1673): prog-id=90 op=UNLOAD Jul 15 11:34:46.730000 audit: BPF prog-id=73 op=UNLOAD Jul 15 11:34:46.730000 audit: BPF prog-id=90 op=UNLOAD Jul 15 11:34:47.016282 env[1251]: time="2025-07-15T11:34:46.779181054Z" level=info msg="shim disconnected" id=6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7 Jul 15 11:34:47.016282 env[1251]: time="2025-07-15T11:34:46.779228412Z" level=warning msg="cleaning up after shim disconnected" id=6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7 namespace=k8s.io Jul 15 11:34:47.016282 env[1251]: time="2025-07-15T11:34:46.779239512Z" level=info msg="cleaning up dead shim" Jul 15 11:34:47.016282 env[1251]: time="2025-07-15T11:34:46.789044035Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:34:46Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5777 runtime=io.containerd.runc.v2\n" Jul 15 11:34:46.726605 systemd[1]: cri-containerd-6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7.scope: Consumed 4.214s CPU time. Jul 15 11:34:46.865873 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7-rootfs.mount: Deactivated successfully. Jul 15 11:34:47.693000 audit: BPF prog-id=114 op=UNLOAD Jul 15 11:34:47.714779 kernel: audit: type=1334 audit(1752579287.693:1674): prog-id=114 op=UNLOAD Jul 15 11:34:47.694980 systemd[1]: cri-containerd-267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5.scope: Deactivated successfully. Jul 15 11:34:47.695311 systemd[1]: cri-containerd-267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5.scope: Consumed 7.519s CPU time. Jul 15 11:34:47.735993 kernel: audit: type=1334 audit(1752579287.731:1675): prog-id=117 op=UNLOAD Jul 15 11:34:47.731000 audit: BPF prog-id=117 op=UNLOAD Jul 15 11:34:47.735235 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5-rootfs.mount: Deactivated successfully. Jul 15 11:34:47.737690 env[1251]: time="2025-07-15T11:34:47.736640174Z" level=info msg="shim disconnected" id=267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5 Jul 15 11:34:47.737690 env[1251]: time="2025-07-15T11:34:47.736676663Z" level=warning msg="cleaning up after shim disconnected" id=267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5 namespace=k8s.io Jul 15 11:34:47.737690 env[1251]: time="2025-07-15T11:34:47.736687778Z" level=info msg="cleaning up dead shim" Jul 15 11:34:47.749423 env[1251]: time="2025-07-15T11:34:47.748059716Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:34:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5802 runtime=io.containerd.runc.v2\n" Jul 15 11:34:47.971064 systemd[1]: cri-containerd-60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab.scope: Deactivated successfully. Jul 15 11:34:47.971267 systemd[1]: cri-containerd-60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab.scope: Consumed 2.377s CPU time. Jul 15 11:34:47.977385 kernel: audit: type=1334 audit(1752579287.973:1676): prog-id=81 op=UNLOAD Jul 15 11:34:47.977503 kernel: audit: type=1334 audit(1752579287.973:1677): prog-id=96 op=UNLOAD Jul 15 11:34:47.973000 audit: BPF prog-id=81 op=UNLOAD Jul 15 11:34:47.973000 audit: BPF prog-id=96 op=UNLOAD Jul 15 11:34:47.991190 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab-rootfs.mount: Deactivated successfully. Jul 15 11:34:47.992565 env[1251]: time="2025-07-15T11:34:47.992526395Z" level=info msg="shim disconnected" id=60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab Jul 15 11:34:47.992822 env[1251]: time="2025-07-15T11:34:47.992809448Z" level=warning msg="cleaning up after shim disconnected" id=60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab namespace=k8s.io Jul 15 11:34:47.992911 env[1251]: time="2025-07-15T11:34:47.992897828Z" level=info msg="cleaning up dead shim" Jul 15 11:34:47.999553 env[1251]: time="2025-07-15T11:34:47.999522934Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:34:47Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=5829 runtime=io.containerd.runc.v2\n" Jul 15 11:34:52.596979 sshd[5691]: pam_unix(sshd:session): session closed for user core Jul 15 11:34:52.621000 audit[5691]: USER_END pid=5691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:52.633727 kernel: audit: type=1106 audit(1752579292.621:1678): pid=5691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:52.633890 kernel: audit: type=1104 audit(1752579292.627:1679): pid=5691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:52.627000 audit[5691]: CRED_DISP pid=5691 uid=0 auid=500 ses=14 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:52.686993 systemd[1]: sshd@13-139.178.70.108:22-147.75.109.163:42108.service: Deactivated successfully. Jul 15 11:34:52.705972 kernel: audit: type=1131 audit(1752579292.691:1680): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.108:22-147.75.109.163:42108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:52.691000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@13-139.178.70.108:22-147.75.109.163:42108 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:52.701223 systemd[1]: session-14.scope: Deactivated successfully. Jul 15 11:34:52.701360 systemd[1]: session-14.scope: Consumed 6.762s CPU time. Jul 15 11:34:52.701810 systemd-logind[1241]: Session 14 logged out. Waiting for processes to exit. Jul 15 11:34:52.762440 systemd-logind[1241]: Removed session 14. Jul 15 11:34:54.491275 kubelet[2123]: E0715 11:34:54.491229 2123 request.go:1360] "Unexpected error when reading response body" err="http2: client connection lost" Jul 15 11:34:54.518367 kubelet[2123]: E0715 11:34:54.518338 2123 request.go:1360] "Unexpected error when reading response body" err="http2: client connection lost" Jul 15 11:34:54.594219 kubelet[2123]: E0715 11:34:54.594188 2123 request.go:1360] "Unexpected error when reading response body" err="http2: client connection lost" Jul 15 11:34:54.594351 kubelet[2123]: E0715 11:34:54.594253 2123 reflector.go:200] "Failed to watch" err="failed to list *v1.Secret: unexpected error when reading response body. Please retry. Original error: http2: client connection lost" logger="UnhandledError" reflector="object-\"calico-apiserver\"/\"calico-apiserver-certs\"" type="*v1.Secret" Jul 15 11:34:54.594351 kubelet[2123]: E0715 11:34:54.594274 2123 request.go:1360] "Unexpected error when reading response body" err="http2: client connection lost" Jul 15 11:34:54.623899 kubelet[2123]: E0715 11:34:54.623869 2123 request.go:1360] "Unexpected error when reading response body" err="http2: client connection lost" Jul 15 11:34:54.624007 kubelet[2123]: E0715 11:34:54.623936 2123 reflector.go:200] "Failed to watch" err="failed to list *v1.ConfigMap: unexpected error when reading response body. Please retry. Original error: http2: client connection lost" logger="UnhandledError" reflector="object-\"tigera-operator\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" Jul 15 11:34:54.624007 kubelet[2123]: E0715 11:34:54.623951 2123 request.go:1360] "Unexpected error when reading response body" err="http2: client connection lost" Jul 15 11:34:54.624007 kubelet[2123]: E0715 11:34:54.623972 2123 reflector.go:200] "Failed to watch" err="failed to list *v1.Service: unexpected error when reading response body. Please retry. Original error: http2: client connection lost" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.Service" Jul 15 11:34:54.696575 kubelet[2123]: E0715 11:34:54.696538 2123 request.go:1360] "Unexpected error when reading response body" err="http2: client connection lost" Jul 15 11:34:54.696705 kubelet[2123]: E0715 11:34:54.696600 2123 reflector.go:200] "Failed to watch" err="failed to list *v1.Secret: unexpected error when reading response body. Please retry. Original error: http2: client connection lost" logger="UnhandledError" reflector="object-\"calico-system\"/\"whisker-backend-key-pair\"" type="*v1.Secret" Jul 15 11:34:54.751942 kubelet[2123]: E0715 11:34:54.751844 2123 request.go:1360] "Unexpected error when reading response body" err="http2: client connection lost" Jul 15 11:34:54.752139 kubelet[2123]: E0715 11:34:54.752121 2123 reflector.go:200] "Failed to watch" err="failed to list *v1.ConfigMap: unexpected error when reading response body. Please retry. Original error: http2: client connection lost" logger="UnhandledError" reflector="object-\"kube-system\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" Jul 15 11:34:54.880807 kubelet[2123]: E0715 11:34:54.880766 2123 request.go:1360] "Unexpected error when reading response body" err="http2: client connection lost" Jul 15 11:34:54.887809 kubelet[2123]: E0715 11:34:54.880849 2123 reflector.go:200] "Failed to watch" err="failed to list *v1.ConfigMap: unexpected error when reading response body. Please retry. Original error: http2: client connection lost" logger="UnhandledError" reflector="object-\"kube-system\"/\"coredns\"" type="*v1.ConfigMap" Jul 15 11:34:54.891436 kubelet[2123]: E0715 11:34:54.891404 2123 reflector.go:200] "Failed to watch" err="failed to list *v1.Secret: unexpected error when reading response body. Please retry. Original error: http2: client connection lost" logger="UnhandledError" reflector="object-\"calico-system\"/\"goldmane-key-pair\"" type="*v1.Secret" Jul 15 11:34:54.955431 kubelet[2123]: E0715 11:34:54.955383 2123 reflector.go:200] "Failed to watch" err="failed to list *v1.ConfigMap: unexpected error when reading response body. Please retry. Original error: http2: client connection lost" logger="UnhandledError" reflector="object-\"calico-apiserver\"/\"kube-root-ca.crt\"" type="*v1.ConfigMap" Jul 15 11:34:55.052437 kubelet[2123]: E0715 11:34:55.052395 2123 reflector.go:200] "Failed to watch" err="Get \"https://139.178.70.108:6443/api/v1/namespaces/calico-system/configmaps?allowWatchBookmarks=true&fieldSelector=metadata.name%3Dtigera-ca-bundle&resourceVersion=694&timeout=49m2s&timeoutSeconds=2942&watch=true\": http2: client connection lost" logger="UnhandledError" reflector="object-\"calico-system\"/\"tigera-ca-bundle\"" type="*v1.ConfigMap" Jul 15 11:34:55.052999 kubelet[2123]: E0715 11:34:54.891623 2123 event.go:368] "Unable to write event (may retry after sleeping)" err="Post \"https://139.178.70.108:6443/api/v1/namespaces/kube-system/events\": http2: client connection lost" event="&Event{ObjectMeta:{coredns-674b8bbfcf-klb5s.185269585ea46610 kube-system 0 0001-01-01 00:00:00 +0000 UTC map[] map[] [] [] []},InvolvedObject:ObjectReference{Kind:Pod,Namespace:kube-system,Name:coredns-674b8bbfcf-klb5s,UID:c330bef8-f79b-4274-a807-a934b3cc71d4,APIVersion:v1,ResourceVersion:821,FieldPath:spec.containers{coredns},},Reason:Unhealthy,Message:Readiness probe failed: Get \"http://192.168.88.132:8181/ready\": context deadline exceeded (Client.Timeout exceeded while awaiting headers),Source:EventSource{Component:kubelet,Host:localhost,},FirstTimestamp:2025-07-15 11:30:33.26641512 +0000 UTC m=+75.697964884,LastTimestamp:2025-07-15 11:30:33.26641512 +0000 UTC m=+75.697964884,Count:1,Type:Warning,EventTime:0001-01-01 00:00:00 +0000 UTC,Series:nil,Action:,Related:nil,ReportingController:kubelet,ReportingInstance:localhost,}" Jul 15 11:34:55.128164 kubelet[2123]: E0715 11:34:55.053104 2123 reflector.go:200] "Failed to watch" err="failed to list *v1.RuntimeClass: unexpected error when reading response body. Please retry. Original error: http2: client connection lost" logger="UnhandledError" reflector="k8s.io/client-go/informers/factory.go:160" type="*v1.RuntimeClass" Jul 15 11:34:55.128232 env[1251]: time="2025-07-15T11:34:55.107294440Z" level=info msg="StopPodSandbox for \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\"" Jul 15 11:34:55.137233 kubelet[2123]: E0715 11:34:55.130236 2123 controller.go:195] "Failed to update lease" err="Put \"https://139.178.70.108:6443/apis/coordination.k8s.io/v1/namespaces/kube-node-lease/leases/localhost?timeout=10s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" Jul 15 11:34:55.225206 systemd[1]: run-containerd-runc-k8s.io-ca94c2df2b1a8bef147e6bce17b6e793832287a4239ffe13a946e17b32e202a2-runc.N7FuMh.mount: Deactivated successfully. Jul 15 11:34:55.487504 kubelet[2123]: E0715 11:34:55.487419 2123 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-15 11:34:54.812515018 +0000 UTC m=+337.244064783 (durationBeforeRetry 500ms). Error: RegisterPlugin error -- dial failed at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: failed to dial socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: context deadline exceeded Jul 15 11:34:56.517708 systemd[1]: run-containerd-runc-k8s.io-17d067fd24c22b7d111623073fa6bab401e042df034cd1cc18965f11b0fcf9f5-runc.fQI5RE.mount: Deactivated successfully. Jul 15 11:34:56.914743 kubelet[2123]: E0715 11:34:56.912467 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="2m13.222s" Jul 15 11:34:57.049588 systemd[1]: Removed slice kubepods-besteffort-podcea21dcf_c636_4c32_9de2_493a871086ec.slice. Jul 15 11:34:57.866296 systemd[1]: Started sshd@14-139.178.70.108:22-147.75.109.163:49750.service. Jul 15 11:34:57.903511 kernel: audit: type=1130 audit(1752579297.880:1681): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.108:22-147.75.109.163:49750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:57.880000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.108:22-147.75.109.163:49750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:34:58.295000 audit[5994]: USER_ACCT pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:58.319572 kernel: audit: type=1101 audit(1752579298.295:1682): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:58.322421 kernel: audit: type=1103 audit(1752579298.300:1683): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:58.322467 kernel: audit: type=1006 audit(1752579298.304:1684): pid=5994 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=15 res=1 Jul 15 11:34:58.322492 kernel: audit: type=1300 audit(1752579298.304:1684): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4d724800 a2=3 a3=0 items=0 ppid=1 pid=5994 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:58.322510 kernel: audit: type=1327 audit(1752579298.304:1684): proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:58.300000 audit[5994]: CRED_ACQ pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:58.304000 audit[5994]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc4d724800 a2=3 a3=0 items=0 ppid=1 pid=5994 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=15 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:34:58.304000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:34:58.317812 sshd[5994]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:34:58.412221 sshd[5994]: Accepted publickey for core from 147.75.109.163 port 49750 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:34:58.604668 systemd-logind[1241]: New session 15 of user core. Jul 15 11:34:58.625210 kernel: audit: type=1105 audit(1752579298.612:1685): pid=5994 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:58.626292 kernel: audit: type=1103 audit(1752579298.612:1686): pid=6003 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:58.612000 audit[5994]: USER_START pid=5994 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:58.612000 audit[6003]: CRED_ACQ pid=6003 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:34:58.606828 systemd[1]: Started session-15.scope. Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:57.983 [WARNING][5934] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4d847c07-b217-4471-ba1f-db8be894e130", ResourceVersion:"1337", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097", Pod:"coredns-674b8bbfcf-xlhc8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali62ebd1110a9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:58.022 [INFO][5934] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:58.023 [INFO][5934] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" iface="eth0" netns="" Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:58.024 [INFO][5934] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:58.024 [INFO][5934] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:58.927 [INFO][5996] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" HandleID="k8s-pod-network.bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:58.931 [INFO][5996] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:58.932 [INFO][5996] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:59.108 [WARNING][5996] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" HandleID="k8s-pod-network.bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:59.108 [INFO][5996] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" HandleID="k8s-pod-network.bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:59.113 [INFO][5996] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:34:59.133625 env[1251]: 2025-07-15 11:34:59.120 [INFO][5934] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:34:59.147230 env[1251]: time="2025-07-15T11:34:59.134085747Z" level=info msg="TearDown network for sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\" successfully" Jul 15 11:34:59.147230 env[1251]: time="2025-07-15T11:34:59.134117892Z" level=info msg="StopPodSandbox for \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\" returns successfully" Jul 15 11:35:01.987916 kubelet[2123]: E0715 11:35:01.980717 2123 controller.go:195] "Failed to update lease" err="Operation cannot be fulfilled on leases.coordination.k8s.io \"localhost\": the object has been modified; please apply your changes to the latest version and try again" Jul 15 11:35:02.529570 env[1251]: time="2025-07-15T11:35:02.528896046Z" level=info msg="RemovePodSandbox for \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\"" Jul 15 11:35:02.529570 env[1251]: time="2025-07-15T11:35:02.528937385Z" level=info msg="Forcibly stopping sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\"" Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:03.840 [WARNING][6022] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"4d847c07-b217-4471-ba1f-db8be894e130", ResourceVersion:"1337", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"3a3e929d2097805821627d95da0d28c941bdf60ea6270a0714e0e495858cb097", Pod:"coredns-674b8bbfcf-xlhc8", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.135/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali62ebd1110a9", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:03.864 [INFO][6022] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:03.865 [INFO][6022] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" iface="eth0" netns="" Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:03.866 [INFO][6022] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:03.866 [INFO][6022] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:04.820 [INFO][6090] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" HandleID="k8s-pod-network.bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:04.852 [INFO][6090] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:04.861 [INFO][6090] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:04.980 [WARNING][6090] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" HandleID="k8s-pod-network.bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:04.980 [INFO][6090] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" HandleID="k8s-pod-network.bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Workload="localhost-k8s-coredns--674b8bbfcf--xlhc8-eth0" Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:04.981 [INFO][6090] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:35:05.001177 env[1251]: 2025-07-15 11:35:04.988 [INFO][6022] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c" Jul 15 11:35:05.001177 env[1251]: time="2025-07-15T11:35:04.996434719Z" level=info msg="TearDown network for sandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\" successfully" Jul 15 11:35:05.069146 env[1251]: time="2025-07-15T11:35:05.006866807Z" level=info msg="RemovePodSandbox \"bcd08fb363795667797a6865388eba7c96185c68ce37ca9a527cf9bd50d13f4c\" returns successfully" Jul 15 11:35:08.200000 audit[4455]: AVC avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:35:08.337763 kernel: audit: type=1400 audit(1752579308.200:1687): avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:35:08.372901 kernel: audit: type=1300 audit(1752579308.200:1687): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a60060 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:35:08.373009 kernel: audit: type=1327 audit(1752579308.200:1687): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:35:08.378766 kernel: audit: type=1400 audit(1752579308.200:1688): avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:35:08.378823 kernel: audit: type=1300 audit(1752579308.200:1688): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0016845c0 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:35:08.378845 kernel: audit: type=1327 audit(1752579308.200:1688): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:35:08.200000 audit[4455]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000a60060 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:35:08.200000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:35:08.200000 audit[4635]: AVC avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:35:08.200000 audit[4635]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0016845c0 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:35:08.200000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:35:09.214926 env[1251]: time="2025-07-15T11:35:09.214615528Z" level=info msg="StopPodSandbox for \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\"" Jul 15 11:35:09.296765 kubelet[2123]: E0715 11:35:09.296721 2123 goroutinemap.go:150] Operation for "/var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock" failed. No retries permitted until 2025-07-15 11:35:09.983537617 +0000 UTC m=+352.415087386 (durationBeforeRetry 1s). Error: RegisterPlugin error -- failed to get plugin info using RPC GetInfo at socket /var/lib/kubelet/plugins_registry/csi.tigera.io-reg.sock, err: rpc error: code = DeadlineExceeded desc = context deadline exceeded Jul 15 11:35:09.394717 sshd[5994]: pam_unix(sshd:session): session closed for user core Jul 15 11:35:09.424293 systemd[1]: Started sshd@15-139.178.70.108:22-147.75.109.163:40796.service. Jul 15 11:35:09.441336 kernel: audit: type=1130 audit(1752579309.426:1689): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.108:22-147.75.109.163:40796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:09.426000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.108:22-147.75.109.163:40796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:09.472000 audit[5994]: USER_END pid=5994 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:09.478467 kernel: audit: type=1106 audit(1752579309.472:1690): pid=5994 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:09.477000 audit[5994]: CRED_DISP pid=5994 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:09.484359 kernel: audit: type=1104 audit(1752579309.477:1691): pid=5994 uid=0 auid=500 ses=15 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:09.489184 systemd[1]: sshd@14-139.178.70.108:22-147.75.109.163:49750.service: Deactivated successfully. Jul 15 11:35:09.490408 systemd[1]: session-15.scope: Deactivated successfully. Jul 15 11:35:09.490651 systemd[1]: session-15.scope: Consumed 1.085s CPU time. Jul 15 11:35:09.488000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.108:22-147.75.109.163:49750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:09.495606 kernel: audit: type=1131 audit(1752579309.488:1692): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@14-139.178.70.108:22-147.75.109.163:49750 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:09.495316 systemd-logind[1241]: Session 15 logged out. Waiting for processes to exit. Jul 15 11:35:09.497498 systemd-logind[1241]: Removed session 15. Jul 15 11:35:09.665421 sshd[6108]: Accepted publickey for core from 147.75.109.163 port 40796 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:35:09.664000 audit[6108]: USER_ACCT pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:09.665000 audit[6108]: CRED_ACQ pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:09.665000 audit[6108]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe8ea5a5c0 a2=3 a3=0 items=0 ppid=1 pid=6108 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=16 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:09.665000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:35:09.692414 sshd[6108]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:35:09.758440 systemd-logind[1241]: New session 16 of user core. Jul 15 11:35:09.761159 systemd[1]: Started session-16.scope. Jul 15 11:35:09.763000 audit[6108]: USER_START pid=6108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:09.764000 audit[6118]: CRED_ACQ pid=6118 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:09.810926 kubelet[2123]: I0715 11:35:09.800504 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/calico-kube-controllers-79f4f75899-956zh" podStartSLOduration=322.970606366 podStartE2EDuration="5m34.794266117s" podCreationTimestamp="2025-07-15 11:29:35 +0000 UTC" firstStartedPulling="2025-07-15 11:30:05.030850944 +0000 UTC m=+47.462400703" lastFinishedPulling="2025-07-15 11:30:16.85451069 +0000 UTC m=+59.286060454" observedRunningTime="2025-07-15 11:35:09.624242925 +0000 UTC m=+352.055792692" watchObservedRunningTime="2025-07-15 11:35:09.794266117 +0000 UTC m=+352.225815882" Jul 15 11:35:09.913392 kubelet[2123]: E0715 11:35:09.913361 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="8.759s" Jul 15 11:35:10.081514 kubelet[2123]: I0715 11:35:10.081435 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/goldmane-768f4c5c69-pjcl6" podStartSLOduration=316.798051722 podStartE2EDuration="5m35.08142056s" podCreationTimestamp="2025-07-15 11:29:35 +0000 UTC" firstStartedPulling="2025-07-15 11:30:06.127822625 +0000 UTC m=+48.559372395" lastFinishedPulling="2025-07-15 11:30:24.411191474 +0000 UTC m=+66.842741233" observedRunningTime="2025-07-15 11:35:09.811730631 +0000 UTC m=+352.243280403" watchObservedRunningTime="2025-07-15 11:35:10.08142056 +0000 UTC m=+352.512970326" Jul 15 11:35:10.394392 kubelet[2123]: I0715 11:35:10.394203 2123 pod_startup_latency_tracker.go:104] "Observed pod startup duration" pod="calico-system/csi-node-driver-bdpgt" podStartSLOduration=303.721424872 podStartE2EDuration="5m35.394186144s" podCreationTimestamp="2025-07-15 11:29:35 +0000 UTC" firstStartedPulling="2025-07-15 11:30:01.042445685 +0000 UTC m=+43.473995444" lastFinishedPulling="2025-07-15 11:30:32.715206954 +0000 UTC m=+75.146756716" observedRunningTime="2025-07-15 11:35:10.302005981 +0000 UTC m=+352.733555757" watchObservedRunningTime="2025-07-15 11:35:10.394186144 +0000 UTC m=+352.825735915" Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.196 [WARNING][6106] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--klb5s-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"c330bef8-f79b-4274-a807-a934b3cc71d4", ResourceVersion:"1305", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be", Pod:"coredns-674b8bbfcf-klb5s", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali863631863dc", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.200 [INFO][6106] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.200 [INFO][6106] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" iface="eth0" netns="" Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.201 [INFO][6106] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.201 [INFO][6106] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.837 [INFO][6126] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" HandleID="k8s-pod-network.72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.852 [INFO][6126] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.857 [INFO][6126] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.921 [WARNING][6126] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" HandleID="k8s-pod-network.72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.925 [INFO][6126] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" HandleID="k8s-pod-network.72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.931 [INFO][6126] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:35:10.998562 env[1251]: 2025-07-15 11:35:10.977 [INFO][6106] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:35:11.034160 env[1251]: time="2025-07-15T11:35:11.000821492Z" level=info msg="TearDown network for sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\" successfully" Jul 15 11:35:11.034160 env[1251]: time="2025-07-15T11:35:11.000849820Z" level=info msg="StopPodSandbox for \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\" returns successfully" Jul 15 11:35:11.158009 env[1251]: time="2025-07-15T11:35:11.157733790Z" level=info msg="RemovePodSandbox for \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\"" Jul 15 11:35:11.158009 env[1251]: time="2025-07-15T11:35:11.157762499Z" level=info msg="Forcibly stopping sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\"" Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:11.878 [WARNING][6161] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-coredns--674b8bbfcf--klb5s-eth0", GenerateName:"coredns-674b8bbfcf-", Namespace:"kube-system", SelfLink:"", UID:"c330bef8-f79b-4274-a807-a934b3cc71d4", ResourceVersion:"1305", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 22, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"k8s-app":"kube-dns", "pod-template-hash":"674b8bbfcf", "projectcalico.org/namespace":"kube-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"coredns"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"e6be2de2566fd81c4198efa396fb15bd70b30abbb38e97252acda65f5a2f75be", Pod:"coredns-674b8bbfcf-klb5s", Endpoint:"eth0", ServiceAccountName:"coredns", IPNetworks:[]string{"192.168.88.132/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.kube-system", "ksa.kube-system.coredns"}, InterfaceName:"cali863631863dc", MAC:"", Ports:[]v3.WorkloadEndpointPort{v3.WorkloadEndpointPort{Name:"dns", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"UDP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"dns-tcp", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x35, HostPort:0x0, HostIP:""}, v3.WorkloadEndpointPort{Name:"metrics", Protocol:numorstring.Protocol{Type:1, NumVal:0x0, StrVal:"TCP"}, Port:0x23c1, HostPort:0x0, HostIP:""}}, AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:11.879 [INFO][6161] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:11.879 [INFO][6161] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" iface="eth0" netns="" Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:11.880 [INFO][6161] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:11.880 [INFO][6161] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:12.521 [INFO][6168] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" HandleID="k8s-pod-network.72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:12.526 [INFO][6168] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:12.527 [INFO][6168] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:12.570 [WARNING][6168] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" HandleID="k8s-pod-network.72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:12.570 [INFO][6168] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" HandleID="k8s-pod-network.72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Workload="localhost-k8s-coredns--674b8bbfcf--klb5s-eth0" Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:12.578 [INFO][6168] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:35:12.582424 env[1251]: 2025-07-15 11:35:12.580 [INFO][6161] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904" Jul 15 11:35:12.582424 env[1251]: time="2025-07-15T11:35:12.582011301Z" level=info msg="TearDown network for sandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\" successfully" Jul 15 11:35:12.700219 env[1251]: time="2025-07-15T11:35:12.600672591Z" level=info msg="RemovePodSandbox \"72870ff486469f8074e9f7203029d3c5b0cf3c39ac3467d946ccd2df1cbe1904\" returns successfully" Jul 15 11:35:13.329550 env[1251]: time="2025-07-15T11:35:13.329477011Z" level=info msg="StopPodSandbox for \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\"" Jul 15 11:35:14.370000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:14.454984 kernel: kauditd_printk_skb: 7 callbacks suppressed Jul 15 11:35:14.495635 kernel: audit: type=1400 audit(1752579314.370:1698): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:14.501026 kernel: audit: type=1300 audit(1752579314.370:1698): arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0139dac00 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:35:14.501351 kernel: audit: type=1327 audit(1752579314.370:1698): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:35:14.502513 kernel: audit: type=1400 audit(1752579314.382:1699): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:14.502566 kernel: audit: type=1300 audit(1752579314.382:1699): arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00f4e1380 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:35:14.502587 kernel: audit: type=1327 audit(1752579314.382:1699): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:35:14.502603 kernel: audit: type=1400 audit(1752579314.414:1700): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:14.509977 kernel: audit: type=1300 audit(1752579314.414:1700): arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00f4e13a0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:35:14.512206 kernel: audit: type=1327 audit(1752579314.414:1700): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:35:14.512445 kernel: audit: type=1400 audit(1752579314.423:1701): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:14.370000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6a a1=c0139dac00 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:35:14.370000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:35:14.382000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:14.382000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00f4e1380 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:35:14.382000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:35:14.414000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:14.414000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c00f4e13a0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:35:14.414000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:35:14.423000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:14.423000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=45 a1=c0139dac90 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:35:14.423000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:35:14.435000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:14.435000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c011633800 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:35:14.435000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:35:14.435000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:14.435000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=47 a1=c011633890 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:35:14.435000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:14.157 [WARNING][6182] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0", GenerateName:"calico-kube-controllers-79f4f75899-", Namespace:"calico-system", SelfLink:"", UID:"987cfc20-a8f4-4673-935d-50967ef2f542", ResourceVersion:"1663", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79f4f75899", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25", Pod:"calico-kube-controllers-79f4f75899-956zh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali91a0bacf8cb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:14.162 [INFO][6182] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:14.162 [INFO][6182] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" iface="eth0" netns="" Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:14.162 [INFO][6182] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:14.162 [INFO][6182] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:15.364 [INFO][6190] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" HandleID="k8s-pod-network.73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:15.438 [INFO][6190] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:15.444 [INFO][6190] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:15.748 [WARNING][6190] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" HandleID="k8s-pod-network.73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:15.748 [INFO][6190] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" HandleID="k8s-pod-network.73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:15.753 [INFO][6190] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:35:15.792210 env[1251]: 2025-07-15 11:35:15.764 [INFO][6182] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:35:15.833995 env[1251]: time="2025-07-15T11:35:15.793247543Z" level=info msg="TearDown network for sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\" successfully" Jul 15 11:35:15.833995 env[1251]: time="2025-07-15T11:35:15.793275386Z" level=info msg="StopPodSandbox for \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\" returns successfully" Jul 15 11:35:18.344730 env[1251]: time="2025-07-15T11:35:18.344657065Z" level=info msg="RemovePodSandbox for \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\"" Jul 15 11:35:18.344730 env[1251]: time="2025-07-15T11:35:18.344686166Z" level=info msg="Forcibly stopping sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\"" Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:20.604 [WARNING][6221] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0", GenerateName:"calico-kube-controllers-79f4f75899-", Namespace:"calico-system", SelfLink:"", UID:"987cfc20-a8f4-4673-935d-50967ef2f542", ResourceVersion:"1663", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"calico-kube-controllers", "k8s-app":"calico-kube-controllers", "pod-template-hash":"79f4f75899", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-kube-controllers"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"cff25a26666e33ebc6178a389905c02000310c43e99ec5e4d9129d09859adc25", Pod:"calico-kube-controllers-79f4f75899-956zh", Endpoint:"eth0", ServiceAccountName:"calico-kube-controllers", IPNetworks:[]string{"192.168.88.134/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.calico-kube-controllers"}, InterfaceName:"cali91a0bacf8cb", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:20.612 [INFO][6221] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:20.612 [INFO][6221] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" iface="eth0" netns="" Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:20.612 [INFO][6221] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:20.613 [INFO][6221] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:21.787 [INFO][6239] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" HandleID="k8s-pod-network.73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:21.805 [INFO][6239] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:21.809 [INFO][6239] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:21.907 [WARNING][6239] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" HandleID="k8s-pod-network.73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:21.907 [INFO][6239] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" HandleID="k8s-pod-network.73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Workload="localhost-k8s-calico--kube--controllers--79f4f75899--956zh-eth0" Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:21.909 [INFO][6239] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:35:21.953849 env[1251]: 2025-07-15 11:35:21.912 [INFO][6221] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f" Jul 15 11:35:21.953849 env[1251]: time="2025-07-15T11:35:21.935234071Z" level=info msg="TearDown network for sandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\" successfully" Jul 15 11:35:22.217629 env[1251]: time="2025-07-15T11:35:22.017546169Z" level=info msg="RemovePodSandbox \"73b3a42f8a5f5a1b10f7934a1d264965030fda7c1877a9744d945eeb1836896f\" returns successfully" Jul 15 11:35:24.386139 kubelet[2123]: I0715 11:35:24.386095 2123 csi_plugin.go:106] kubernetes.io/csi: Trying to validate a new CSI Driver with name: csi.tigera.io endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock versions: 1.0.0 Jul 15 11:35:24.493405 kubelet[2123]: E0715 11:35:24.490576 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="7.301s" Jul 15 11:35:24.844000 audit[5002]: AVC avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:35:25.016458 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 15 11:35:25.031518 kernel: audit: type=1400 audit(1752579324.844:1704): avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:35:25.034882 kernel: audit: type=1300 audit(1752579324.844:1704): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001576480 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:35:25.034947 kernel: audit: type=1327 audit(1752579324.844:1704): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:35:24.844000 audit[5002]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001576480 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:35:24.844000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:35:25.836913 kubelet[2123]: I0715 11:35:25.836886 2123 csi_plugin.go:119] kubernetes.io/csi: Register new plugin with name: csi.tigera.io at endpoint: /var/lib/kubelet/plugins/csi.tigera.io/csi.sock Jul 15 11:35:28.199045 env[1251]: time="2025-07-15T11:35:28.198631746Z" level=info msg="StopPodSandbox for \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\"" Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:29.823 [WARNING][6300] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" WorkloadEndpoint="localhost-k8s-whisker--6655dfcbbd--xc6cg-eth0" Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:29.827 [INFO][6300] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:29.827 [INFO][6300] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" iface="eth0" netns="" Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:29.827 [INFO][6300] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:29.827 [INFO][6300] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:30.325 [INFO][6308] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" HandleID="k8s-pod-network.ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Workload="localhost-k8s-whisker--6655dfcbbd--xc6cg-eth0" Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:30.327 [INFO][6308] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:30.328 [INFO][6308] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:30.378 [WARNING][6308] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" HandleID="k8s-pod-network.ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Workload="localhost-k8s-whisker--6655dfcbbd--xc6cg-eth0" Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:30.378 [INFO][6308] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" HandleID="k8s-pod-network.ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Workload="localhost-k8s-whisker--6655dfcbbd--xc6cg-eth0" Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:30.379 [INFO][6308] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:35:30.384572 env[1251]: 2025-07-15 11:35:30.381 [INFO][6300] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:35:30.419788 env[1251]: time="2025-07-15T11:35:30.385419932Z" level=info msg="TearDown network for sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\" successfully" Jul 15 11:35:30.419788 env[1251]: time="2025-07-15T11:35:30.385441096Z" level=info msg="StopPodSandbox for \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\" returns successfully" Jul 15 11:35:30.613900 sshd[6108]: pam_unix(sshd:session): session closed for user core Jul 15 11:35:30.671408 systemd[1]: Started sshd@16-139.178.70.108:22-147.75.109.163:44724.service. Jul 15 11:35:30.712587 kernel: audit: type=1130 audit(1752579330.672:1705): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.108:22-147.75.109.163:44724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:30.725067 kernel: audit: type=1106 audit(1752579330.676:1706): pid=6108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:30.725121 kernel: audit: type=1104 audit(1752579330.677:1707): pid=6108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:30.725173 kernel: audit: type=1131 audit(1752579330.695:1708): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.108:22-147.75.109.163:40796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:30.672000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.108:22-147.75.109.163:44724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:30.676000 audit[6108]: USER_END pid=6108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:30.677000 audit[6108]: CRED_DISP pid=6108 uid=0 auid=500 ses=16 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:30.695000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@15-139.178.70.108:22-147.75.109.163:40796 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:30.696966 systemd[1]: sshd@15-139.178.70.108:22-147.75.109.163:40796.service: Deactivated successfully. Jul 15 11:35:30.697563 systemd[1]: session-16.scope: Deactivated successfully. Jul 15 11:35:30.697650 systemd[1]: session-16.scope: Consumed 1.610s CPU time. Jul 15 11:35:30.700133 systemd-logind[1241]: Session 16 logged out. Waiting for processes to exit. Jul 15 11:35:30.700711 systemd-logind[1241]: Removed session 16. Jul 15 11:35:30.785000 audit[6315]: USER_ACCT pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:30.794382 kernel: audit: type=1101 audit(1752579330.785:1709): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:30.794423 kernel: audit: type=1103 audit(1752579330.789:1710): pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:30.789000 audit[6315]: CRED_ACQ pid=6315 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:30.794583 sshd[6315]: Accepted publickey for core from 147.75.109.163 port 44724 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:35:30.792427 sshd[6315]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:35:30.789000 audit[6315]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda58d56c0 a2=3 a3=0 items=0 ppid=1 pid=6315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:30.808278 kernel: audit: type=1006 audit(1752579330.789:1711): pid=6315 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=17 res=1 Jul 15 11:35:30.808330 kernel: audit: type=1300 audit(1752579330.789:1711): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffda58d56c0 a2=3 a3=0 items=0 ppid=1 pid=6315 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=17 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:30.808355 kernel: audit: type=1327 audit(1752579330.789:1711): proctitle=737368643A20636F7265205B707269765D Jul 15 11:35:30.789000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:35:30.825138 systemd-logind[1241]: New session 17 of user core. Jul 15 11:35:30.825824 systemd[1]: Started session-17.scope. Jul 15 11:35:30.829000 audit[6315]: USER_START pid=6315 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:30.835390 kernel: audit: type=1105 audit(1752579330.829:1712): pid=6315 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:30.834000 audit[6318]: CRED_ACQ pid=6318 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:31.468393 env[1251]: time="2025-07-15T11:35:31.467998938Z" level=info msg="RemovePodSandbox for \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\"" Jul 15 11:35:31.468393 env[1251]: time="2025-07-15T11:35:31.468026804Z" level=info msg="Forcibly stopping sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\"" Jul 15 11:35:32.512514 kubelet[2123]: I0715 11:35:32.512484 2123 scope.go:117] "RemoveContainer" containerID="60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab" Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:33.139 [WARNING][6334] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" WorkloadEndpoint="localhost-k8s-whisker--6655dfcbbd--xc6cg-eth0" Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:33.177 [INFO][6334] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:33.177 [INFO][6334] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" iface="eth0" netns="" Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:33.177 [INFO][6334] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:33.177 [INFO][6334] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:34.415 [INFO][6341] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" HandleID="k8s-pod-network.ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Workload="localhost-k8s-whisker--6655dfcbbd--xc6cg-eth0" Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:34.419 [INFO][6341] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:34.420 [INFO][6341] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:34.469 [WARNING][6341] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" HandleID="k8s-pod-network.ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Workload="localhost-k8s-whisker--6655dfcbbd--xc6cg-eth0" Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:34.469 [INFO][6341] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" HandleID="k8s-pod-network.ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Workload="localhost-k8s-whisker--6655dfcbbd--xc6cg-eth0" Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:34.472 [INFO][6341] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:35:34.483796 env[1251]: 2025-07-15 11:35:34.475 [INFO][6334] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393" Jul 15 11:35:34.502416 env[1251]: time="2025-07-15T11:35:34.483820027Z" level=info msg="TearDown network for sandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\" successfully" Jul 15 11:35:34.508485 env[1251]: time="2025-07-15T11:35:34.508379128Z" level=info msg="RemovePodSandbox \"ba82f45c84ad1c66670a4ff2bdea1d9584fdb27801a23f42febe287ec8aab393\" returns successfully" Jul 15 11:35:35.423321 env[1251]: time="2025-07-15T11:35:35.422945099Z" level=info msg="StopPodSandbox for \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\"" Jul 15 11:35:35.853038 kubelet[2123]: E0715 11:35:35.848053 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="7.579s" Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:35.978 [WARNING][6356] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bdpgt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b065a6c7-4fee-4858-b630-917bce34c00e", ResourceVersion:"1678", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe", Pod:"csi-node-driver-bdpgt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7529d19453e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:35.982 [INFO][6356] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:35.982 [INFO][6356] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" iface="eth0" netns="" Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:35.982 [INFO][6356] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:35.982 [INFO][6356] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:36.325 [INFO][6363] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" HandleID="k8s-pod-network.53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:36.334 [INFO][6363] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:36.334 [INFO][6363] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:36.353 [WARNING][6363] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" HandleID="k8s-pod-network.53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:36.353 [INFO][6363] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" HandleID="k8s-pod-network.53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:36.354 [INFO][6363] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:35:36.358007 env[1251]: 2025-07-15 11:35:36.356 [INFO][6356] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:35:36.373885 env[1251]: time="2025-07-15T11:35:36.358032485Z" level=info msg="TearDown network for sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\" successfully" Jul 15 11:35:36.373885 env[1251]: time="2025-07-15T11:35:36.358058821Z" level=info msg="StopPodSandbox for \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\" returns successfully" Jul 15 11:35:36.677283 env[1251]: time="2025-07-15T11:35:36.677113688Z" level=info msg="RemovePodSandbox for \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\"" Jul 15 11:35:36.677283 env[1251]: time="2025-07-15T11:35:36.677142335Z" level=info msg="Forcibly stopping sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\"" Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:36.857 [WARNING][6378] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-csi--node--driver--bdpgt-eth0", GenerateName:"csi-node-driver-", Namespace:"calico-system", SelfLink:"", UID:"b065a6c7-4fee-4858-b630-917bce34c00e", ResourceVersion:"1678", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 35, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"app.kubernetes.io/name":"csi-node-driver", "controller-revision-hash":"8967bcb6f", "k8s-app":"csi-node-driver", "name":"csi-node-driver", "pod-template-generation":"1", "projectcalico.org/namespace":"calico-system", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"csi-node-driver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"f05c4d38f754cbb6c4a47d9efb74c26ff2c1a1448b1a6afd99934dd2de33adfe", Pod:"csi-node-driver-bdpgt", Endpoint:"eth0", ServiceAccountName:"csi-node-driver", IPNetworks:[]string{"192.168.88.131/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-system", "ksa.calico-system.csi-node-driver"}, InterfaceName:"cali7529d19453e", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:36.860 [INFO][6378] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:36.860 [INFO][6378] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" iface="eth0" netns="" Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:36.860 [INFO][6378] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:36.860 [INFO][6378] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:37.835 [INFO][6386] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" HandleID="k8s-pod-network.53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:37.840 [INFO][6386] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:37.840 [INFO][6386] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:37.857 [WARNING][6386] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" HandleID="k8s-pod-network.53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:37.857 [INFO][6386] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" HandleID="k8s-pod-network.53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Workload="localhost-k8s-csi--node--driver--bdpgt-eth0" Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:37.858 [INFO][6386] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:35:37.862850 env[1251]: 2025-07-15 11:35:37.860 [INFO][6378] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248" Jul 15 11:35:37.875085 env[1251]: time="2025-07-15T11:35:37.862868560Z" level=info msg="TearDown network for sandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\" successfully" Jul 15 11:35:37.878181 env[1251]: time="2025-07-15T11:35:37.878155100Z" level=info msg="RemovePodSandbox \"53aac488cd776f73f5683a2507773161a8a7602daf36d7d4bf9e07ffc7d16248\" returns successfully" Jul 15 11:35:38.953309 env[1251]: time="2025-07-15T11:35:38.953105158Z" level=info msg="StopPodSandbox for \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\"" Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.633 [WARNING][6403] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0", GenerateName:"calico-apiserver-6db74f8486-", Namespace:"calico-apiserver", SelfLink:"", UID:"864a889c-657c-4971-80d3-beba352cc850", ResourceVersion:"1706", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6db74f8486", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab", Pod:"calico-apiserver-6db74f8486-2rx6m", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib8d3a053426", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.638 [INFO][6403] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.638 [INFO][6403] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" iface="eth0" netns="" Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.638 [INFO][6403] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.638 [INFO][6403] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.870 [INFO][6410] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" HandleID="k8s-pod-network.40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.872 [INFO][6410] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.872 [INFO][6410] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.885 [WARNING][6410] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" HandleID="k8s-pod-network.40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.885 [INFO][6410] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" HandleID="k8s-pod-network.40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.887 [INFO][6410] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:35:39.893355 env[1251]: 2025-07-15 11:35:39.891 [INFO][6403] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:35:39.893355 env[1251]: time="2025-07-15T11:35:39.893032192Z" level=info msg="TearDown network for sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\" successfully" Jul 15 11:35:39.893355 env[1251]: time="2025-07-15T11:35:39.893051159Z" level=info msg="StopPodSandbox for \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\" returns successfully" Jul 15 11:35:40.191689 env[1251]: time="2025-07-15T11:35:40.191557563Z" level=info msg="RemovePodSandbox for \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\"" Jul 15 11:35:40.191689 env[1251]: time="2025-07-15T11:35:40.191585014Z" level=info msg="Forcibly stopping sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\"" Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.252 [WARNING][6425] cni-plugin/k8s.go 604: CNI_CONTAINERID does not match WorkloadEndpoint ContainerID, don't delete WEP. ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" WorkloadEndpoint=&v3.WorkloadEndpoint{TypeMeta:v1.TypeMeta{Kind:"WorkloadEndpoint", APIVersion:"projectcalico.org/v3"}, ObjectMeta:v1.ObjectMeta{Name:"localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0", GenerateName:"calico-apiserver-6db74f8486-", Namespace:"calico-apiserver", SelfLink:"", UID:"864a889c-657c-4971-80d3-beba352cc850", ResourceVersion:"1706", Generation:0, CreationTimestamp:time.Date(2025, time.July, 15, 11, 29, 31, 0, time.Local), DeletionTimestamp:, DeletionGracePeriodSeconds:(*int64)(nil), Labels:map[string]string{"apiserver":"true", "app.kubernetes.io/name":"calico-apiserver", "k8s-app":"calico-apiserver", "pod-template-hash":"6db74f8486", "projectcalico.org/namespace":"calico-apiserver", "projectcalico.org/orchestrator":"k8s", "projectcalico.org/serviceaccount":"calico-apiserver"}, Annotations:map[string]string(nil), OwnerReferences:[]v1.OwnerReference(nil), Finalizers:[]string(nil), ManagedFields:[]v1.ManagedFieldsEntry(nil)}, Spec:v3.WorkloadEndpointSpec{Orchestrator:"k8s", Workload:"", Node:"localhost", ContainerID:"152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab", Pod:"calico-apiserver-6db74f8486-2rx6m", Endpoint:"eth0", ServiceAccountName:"calico-apiserver", IPNetworks:[]string{"192.168.88.130/32"}, IPNATs:[]v3.IPNAT(nil), IPv4Gateway:"", IPv6Gateway:"", Profiles:[]string{"kns.calico-apiserver", "ksa.calico-apiserver.calico-apiserver"}, InterfaceName:"calib8d3a053426", MAC:"", Ports:[]v3.WorkloadEndpointPort(nil), AllowSpoofedSourcePrefixes:[]string(nil), QoSControls:(*v3.QoSControls)(nil)}} Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.252 [INFO][6425] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.252 [INFO][6425] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" iface="eth0" netns="" Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.252 [INFO][6425] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.252 [INFO][6425] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.281 [INFO][6432] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" HandleID="k8s-pod-network.40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.281 [INFO][6432] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.281 [INFO][6432] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.290 [WARNING][6432] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" HandleID="k8s-pod-network.40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.290 [INFO][6432] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" HandleID="k8s-pod-network.40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.291 [INFO][6432] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:35:40.298131 env[1251]: 2025-07-15 11:35:40.294 [INFO][6425] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330" Jul 15 11:35:40.301941 env[1251]: time="2025-07-15T11:35:40.298136120Z" level=info msg="TearDown network for sandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\" successfully" Jul 15 11:35:40.304990 env[1251]: time="2025-07-15T11:35:40.304816891Z" level=info msg="RemovePodSandbox \"40137e4906e704bdadbfc9da63c377fa01307872872886ed058a6fb931ada330\" returns successfully" Jul 15 11:35:40.338921 sshd[6315]: pam_unix(sshd:session): session closed for user core Jul 15 11:35:40.400361 kernel: kauditd_printk_skb: 1 callbacks suppressed Jul 15 11:35:40.412070 kernel: audit: type=1106 audit(1752579340.394:1714): pid=6315 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:40.418172 kernel: audit: type=1104 audit(1752579340.395:1715): pid=6315 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:40.394000 audit[6315]: USER_END pid=6315 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:40.435450 kernel: audit: type=1131 audit(1752579340.420:1716): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.108:22-147.75.109.163:44724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:40.395000 audit[6315]: CRED_DISP pid=6315 uid=0 auid=500 ses=17 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:40.420000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@16-139.178.70.108:22-147.75.109.163:44724 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:40.416216 systemd[1]: sshd@16-139.178.70.108:22-147.75.109.163:44724.service: Deactivated successfully. Jul 15 11:35:40.425939 systemd[1]: session-17.scope: Deactivated successfully. Jul 15 11:35:40.426045 systemd[1]: session-17.scope: Consumed 1.088s CPU time. Jul 15 11:35:40.430533 systemd-logind[1241]: Session 17 logged out. Waiting for processes to exit. Jul 15 11:35:40.448303 systemd-logind[1241]: Removed session 17. Jul 15 11:35:40.898395 kubelet[2123]: E0715 11:35:40.898371 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="4.94s" Jul 15 11:35:40.957426 env[1251]: time="2025-07-15T11:35:40.957312792Z" level=info msg="CreateContainer within sandbox \"e82c4083b9d102dc0f40bee08b6c53ac3393683f34bc2ac899f4e597ad807f9d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:1,}" Jul 15 11:35:41.001132 kubelet[2123]: I0715 11:35:41.001072 2123 scope.go:117] "RemoveContainer" containerID="267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5" Jul 15 11:35:41.006010 kubelet[2123]: I0715 11:35:41.005979 2123 scope.go:117] "RemoveContainer" containerID="6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7" Jul 15 11:35:41.102681 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount4136512270.mount: Deactivated successfully. Jul 15 11:35:41.112440 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount1983184169.mount: Deactivated successfully. Jul 15 11:35:41.115940 env[1251]: time="2025-07-15T11:35:41.115904230Z" level=info msg="CreateContainer within sandbox \"e82c4083b9d102dc0f40bee08b6c53ac3393683f34bc2ac899f4e597ad807f9d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:1,} returns container id \"ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413\"" Jul 15 11:35:41.226901 env[1251]: time="2025-07-15T11:35:41.226718737Z" level=info msg="StartContainer for \"ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413\"" Jul 15 11:35:41.279678 systemd[1]: Started cri-containerd-ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413.scope. Jul 15 11:35:41.305925 kernel: audit: type=1400 audit(1752579341.294:1717): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.306032 kernel: audit: type=1400 audit(1752579341.294:1718): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.306055 kernel: audit: type=1400 audit(1752579341.294:1719): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.306135 kernel: audit: type=1400 audit(1752579341.294:1720): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.358338 kernel: audit: type=1400 audit(1752579341.294:1721): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.358414 kernel: audit: type=1400 audit(1752579341.294:1722): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.358431 kernel: audit: type=1400 audit(1752579341.294:1723): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit: BPF prog-id=247 op=LOAD Jul 15 11:35:41.294000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[6447]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000145c48 a2=10 a3=1c items=0 ppid=1840 pid=6447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261333432393863653037333765313335636235623931623061356233 Jul 15 11:35:41.294000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.294000 audit[6447]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001456b0 a2=3c a3=8 items=0 ppid=1840 pid=6447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.294000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261333432393863653037333765313335636235623931623061356233 Jul 15 11:35:41.295000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.295000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.295000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.295000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.295000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.295000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.295000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.295000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.295000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.295000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.295000 audit: BPF prog-id=248 op=LOAD Jul 15 11:35:41.295000 audit[6447]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001459d8 a2=78 a3=c000304c70 items=0 ppid=1840 pid=6447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.295000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261333432393863653037333765313335636235623931623061356233 Jul 15 11:35:41.299000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.299000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.299000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.299000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.299000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.299000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.299000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.299000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.299000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.299000 audit: BPF prog-id=249 op=LOAD Jul 15 11:35:41.299000 audit[6447]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000145770 a2=78 a3=c000304cb8 items=0 ppid=1840 pid=6447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.299000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261333432393863653037333765313335636235623931623061356233 Jul 15 11:35:41.302000 audit: BPF prog-id=249 op=UNLOAD Jul 15 11:35:41.302000 audit: BPF prog-id=248 op=UNLOAD Jul 15 11:35:41.302000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.302000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.302000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.302000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.302000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.302000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.302000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.302000 audit[6447]: AVC avc: denied { perfmon } for pid=6447 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.302000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.302000 audit[6447]: AVC avc: denied { bpf } for pid=6447 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.302000 audit: BPF prog-id=250 op=LOAD Jul 15 11:35:41.302000 audit[6447]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000145c30 a2=78 a3=c0003050c8 items=0 ppid=1840 pid=6447 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.302000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6261333432393863653037333765313335636235623931623061356233 Jul 15 11:35:41.496242 env[1251]: time="2025-07-15T11:35:41.347911670Z" level=info msg="StartContainer for \"ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413\" returns successfully" Jul 15 11:35:41.597907 env[1251]: time="2025-07-15T11:35:41.597634131Z" level=info msg="CreateContainer within sandbox \"ee953945c3b30cffd21ce4f184545c9e3482100fc3c6a770f2292614cb1d1424\" for container &ContainerMetadata{Name:tigera-operator,Attempt:1,}" Jul 15 11:35:41.599517 env[1251]: time="2025-07-15T11:35:41.599470988Z" level=info msg="CreateContainer within sandbox \"486569508d95cb6a98b616df557f2b505cb608f7851f58cb36ad59bbb823e1fc\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:1,}" Jul 15 11:35:41.630951 env[1251]: time="2025-07-15T11:35:41.630911009Z" level=info msg="CreateContainer within sandbox \"ee953945c3b30cffd21ce4f184545c9e3482100fc3c6a770f2292614cb1d1424\" for &ContainerMetadata{Name:tigera-operator,Attempt:1,} returns container id \"754897b2b2122791951574e957ac01f4a1baf982a137e935e8fdd5bfcc8dd0c8\"" Jul 15 11:35:41.641110 env[1251]: time="2025-07-15T11:35:41.641025196Z" level=info msg="StartContainer for \"754897b2b2122791951574e957ac01f4a1baf982a137e935e8fdd5bfcc8dd0c8\"" Jul 15 11:35:41.647530 env[1251]: time="2025-07-15T11:35:41.647443098Z" level=info msg="CreateContainer within sandbox \"486569508d95cb6a98b616df557f2b505cb608f7851f58cb36ad59bbb823e1fc\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:1,} returns container id \"558f354eecae628cbff97f9a4e30175aff06fbb1a4089edf56660853a3c5d521\"" Jul 15 11:35:41.662596 systemd[1]: Started cri-containerd-754897b2b2122791951574e957ac01f4a1baf982a137e935e8fdd5bfcc8dd0c8.scope. Jul 15 11:35:41.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit: BPF prog-id=251 op=LOAD Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[6480]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000217c48 a2=10 a3=1c items=0 ppid=2253 pid=6480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735343839376232623231323237393139353135373465393537616330 Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[6480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0002176b0 a2=3c a3=8 items=0 ppid=2253 pid=6480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735343839376232623231323237393139353135373465393537616330 Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.692000 audit: BPF prog-id=252 op=LOAD Jul 15 11:35:41.692000 audit[6480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0002179d8 a2=78 a3=c0002dfdc0 items=0 ppid=2253 pid=6480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.692000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735343839376232623231323237393139353135373465393537616330 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit: BPF prog-id=253 op=LOAD Jul 15 11:35:41.693000 audit[6480]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000217770 a2=78 a3=c0002dfe08 items=0 ppid=2253 pid=6480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735343839376232623231323237393139353135373465393537616330 Jul 15 11:35:41.693000 audit: BPF prog-id=253 op=UNLOAD Jul 15 11:35:41.693000 audit: BPF prog-id=252 op=UNLOAD Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { perfmon } for pid=6480 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit[6480]: AVC avc: denied { bpf } for pid=6480 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.693000 audit: BPF prog-id=254 op=LOAD Jul 15 11:35:41.693000 audit[6480]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000217c30 a2=78 a3=c000326218 items=0 ppid=2253 pid=6480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.693000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3735343839376232623231323237393139353135373465393537616330 Jul 15 11:35:41.717946 env[1251]: time="2025-07-15T11:35:41.711130865Z" level=info msg="StartContainer for \"754897b2b2122791951574e957ac01f4a1baf982a137e935e8fdd5bfcc8dd0c8\" returns successfully" Jul 15 11:35:41.717946 env[1251]: time="2025-07-15T11:35:41.715115229Z" level=info msg="StartContainer for \"558f354eecae628cbff97f9a4e30175aff06fbb1a4089edf56660853a3c5d521\"" Jul 15 11:35:41.736763 systemd[1]: Started cri-containerd-558f354eecae628cbff97f9a4e30175aff06fbb1a4089edf56660853a3c5d521.scope. Jul 15 11:35:41.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.767000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.767000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.768000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.768000 audit: BPF prog-id=255 op=LOAD Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=1797 pid=6511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386633353465656361653632386362666639376639613465333031 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=1797 pid=6511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386633353465656361653632386362666639376639613465333031 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit: BPF prog-id=256 op=LOAD Jul 15 11:35:41.769000 audit[6511]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c00030a370 items=0 ppid=1797 pid=6511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386633353465656361653632386362666639376639613465333031 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit: BPF prog-id=257 op=LOAD Jul 15 11:35:41.769000 audit[6511]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c00030a3b8 items=0 ppid=1797 pid=6511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386633353465656361653632386362666639376639613465333031 Jul 15 11:35:41.769000 audit: BPF prog-id=257 op=UNLOAD Jul 15 11:35:41.769000 audit: BPF prog-id=256 op=UNLOAD Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { perfmon } for pid=6511 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit[6511]: AVC avc: denied { bpf } for pid=6511 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:35:41.769000 audit: BPF prog-id=258 op=LOAD Jul 15 11:35:41.769000 audit[6511]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c00030a7c8 items=0 ppid=1797 pid=6511 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:41.769000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3535386633353465656361653632386362666639376639613465333031 Jul 15 11:35:41.816868 kubelet[2123]: I0715 11:35:41.812058 2123 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="cea21dcf-c636-4c32-9de2-493a871086ec" path="/var/lib/kubelet/pods/cea21dcf-c636-4c32-9de2-493a871086ec/volumes" Jul 15 11:35:41.823391 env[1251]: time="2025-07-15T11:35:41.822025329Z" level=info msg="StartContainer for \"558f354eecae628cbff97f9a4e30175aff06fbb1a4089edf56660853a3c5d521\" returns successfully" Jul 15 11:35:45.306000 audit[6522]: AVC avc: denied { watch } for pid=6522 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:45.521173 kernel: kauditd_printk_skb: 170 callbacks suppressed Jul 15 11:35:45.570547 kernel: audit: type=1130 audit(1752579345.454:1773): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.108:22-147.75.109.163:36686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:45.306000 audit[6522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000941500 a2=fc6 a3=0 items=0 ppid=1797 pid=6522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:35:45.306000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:35:45.343000 audit[6522]: AVC avc: denied { watch } for pid=6522 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:35:45.343000 audit[6522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c000a6a0c0 a2=fc6 a3=0 items=0 ppid=1797 pid=6522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:35:45.343000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:35:45.454000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.108:22-147.75.109.163:36686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:45.452179 systemd[1]: Started sshd@17-139.178.70.108:22-147.75.109.163:36686.service. Jul 15 11:35:46.351385 kernel: audit: type=1101 audit(1752579346.345:1774): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:46.345000 audit[6556]: USER_ACCT pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:46.353266 sshd[6556]: Accepted publickey for core from 147.75.109.163 port 36686 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:35:46.362522 kernel: audit: type=1103 audit(1752579346.353:1775): pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:46.362585 kernel: audit: type=1006 audit(1752579346.353:1776): pid=6556 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=18 res=1 Jul 15 11:35:46.353000 audit[6556]: CRED_ACQ pid=6556 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:46.368434 kernel: audit: type=1300 audit(1752579346.353:1776): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe72f397b0 a2=3 a3=0 items=0 ppid=1 pid=6556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:46.368496 kernel: audit: type=1327 audit(1752579346.353:1776): proctitle=737368643A20636F7265205B707269765D Jul 15 11:35:46.353000 audit[6556]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffe72f397b0 a2=3 a3=0 items=0 ppid=1 pid=6556 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=18 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:46.353000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:35:46.372419 sshd[6556]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:35:46.477590 systemd[1]: Started session-18.scope. Jul 15 11:35:46.480804 systemd-logind[1241]: New session 18 of user core. Jul 15 11:35:46.500896 kernel: audit: type=1105 audit(1752579346.485:1777): pid=6556 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:46.503220 kernel: audit: type=1103 audit(1752579346.489:1778): pid=6558 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:46.485000 audit[6556]: USER_START pid=6556 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:46.489000 audit[6558]: CRED_ACQ pid=6558 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:51.540810 kubelet[2123]: E0715 11:35:51.424902 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="4.744s" Jul 15 11:35:53.827894 sshd[6556]: pam_unix(sshd:session): session closed for user core Jul 15 11:35:53.907739 kernel: audit: type=1106 audit(1752579353.873:1779): pid=6556 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:53.914468 kernel: audit: type=1104 audit(1752579353.877:1780): pid=6556 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:53.914513 kernel: audit: type=1131 audit(1752579353.896:1781): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.108:22-147.75.109.163:36686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:53.873000 audit[6556]: USER_END pid=6556 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:53.877000 audit[6556]: CRED_DISP pid=6556 uid=0 auid=500 ses=18 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:53.896000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@17-139.178.70.108:22-147.75.109.163:36686 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:53.892889 systemd[1]: sshd@17-139.178.70.108:22-147.75.109.163:36686.service: Deactivated successfully. Jul 15 11:35:53.897955 systemd[1]: session-18.scope: Deactivated successfully. Jul 15 11:35:53.903001 systemd-logind[1241]: Session 18 logged out. Waiting for processes to exit. Jul 15 11:35:53.914646 systemd-logind[1241]: Removed session 18. Jul 15 11:35:54.641296 systemd[1]: run-containerd-runc-k8s.io-17d067fd24c22b7d111623073fa6bab401e042df034cd1cc18965f11b0fcf9f5-runc.yI3gTO.mount: Deactivated successfully. Jul 15 11:35:58.850045 systemd[1]: Started sshd@18-139.178.70.108:22-147.75.109.163:37966.service. Jul 15 11:35:58.895184 kernel: audit: type=1130 audit(1752579358.852:1782): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.108:22-147.75.109.163:37966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:58.852000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.108:22-147.75.109.163:37966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:59.011000 audit[6652]: USER_ACCT pid=6652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.030092 kernel: audit: type=1101 audit(1752579359.011:1783): pid=6652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.030151 kernel: audit: type=1103 audit(1752579359.016:1784): pid=6652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.030954 kernel: audit: type=1006 audit(1752579359.016:1785): pid=6652 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=19 res=1 Jul 15 11:35:59.030988 kernel: audit: type=1300 audit(1752579359.016:1785): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5e3194e0 a2=3 a3=0 items=0 ppid=1 pid=6652 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:59.031011 kernel: audit: type=1327 audit(1752579359.016:1785): proctitle=737368643A20636F7265205B707269765D Jul 15 11:35:59.016000 audit[6652]: CRED_ACQ pid=6652 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.016000 audit[6652]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc5e3194e0 a2=3 a3=0 items=0 ppid=1 pid=6652 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=19 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:35:59.016000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:35:59.051292 sshd[6652]: Accepted publickey for core from 147.75.109.163 port 37966 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:35:59.030303 sshd[6652]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:35:59.074471 systemd[1]: Started session-19.scope. Jul 15 11:35:59.075599 systemd-logind[1241]: New session 19 of user core. Jul 15 11:35:59.079000 audit[6652]: USER_START pid=6652 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.086058 kernel: audit: type=1105 audit(1752579359.079:1786): pid=6652 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.086100 kernel: audit: type=1103 audit(1752579359.084:1787): pid=6655 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.084000 audit[6655]: CRED_ACQ pid=6655 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.879612 sshd[6652]: pam_unix(sshd:session): session closed for user core Jul 15 11:35:59.895084 kernel: audit: type=1106 audit(1752579359.879:1788): pid=6652 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.895943 kernel: audit: type=1104 audit(1752579359.882:1789): pid=6652 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.895980 kernel: audit: type=1131 audit(1752579359.887:1790): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.108:22-147.75.109.163:37966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:59.879000 audit[6652]: USER_END pid=6652 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.882000 audit[6652]: CRED_DISP pid=6652 uid=0 auid=500 ses=19 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:35:59.887000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@18-139.178.70.108:22-147.75.109.163:37966 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:35:59.887976 systemd[1]: sshd@18-139.178.70.108:22-147.75.109.163:37966.service: Deactivated successfully. Jul 15 11:35:59.889415 systemd[1]: session-19.scope: Deactivated successfully. Jul 15 11:35:59.889782 systemd-logind[1241]: Session 19 logged out. Waiting for processes to exit. Jul 15 11:35:59.893961 systemd-logind[1241]: Removed session 19. Jul 15 11:36:02.521000 audit[6522]: AVC avc: denied { watch } for pid=6522 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:36:02.521000 audit[6522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0015e0c40 a2=fc6 a3=0 items=0 ppid=1797 pid=6522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:36:02.521000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:36:02.525000 audit[6522]: AVC avc: denied { watch } for pid=6522 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=7284 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:36:02.525000 audit[6522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0013a3950 a2=fc6 a3=0 items=0 ppid=1797 pid=6522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:36:02.525000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:36:02.532000 audit[6665]: AVC avc: denied { execute } for pid=6665 comm="kube-controller" name="uds" dev="sda9" ino=7465 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 15 11:36:02.532000 audit[6665]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c0013a3b80 a1=c000b96690 a2=c0013b1400 a3=0 items=0 ppid=6522 pid=6665 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:36:02.532000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:36:02.719000 audit[6522]: AVC avc: denied { watch } for pid=6522 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:02.719000 audit[6522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00180c000 a2=fc6 a3=0 items=0 ppid=1797 pid=6522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:36:02.719000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:36:02.720000 audit[6522]: AVC avc: denied { watch } for pid=6522 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:02.720000 audit[6522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017c85c0 a2=fc6 a3=0 items=0 ppid=1797 pid=6522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:36:02.720000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:36:02.720000 audit[6522]: AVC avc: denied { watch } for pid=6522 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:02.720000 audit[6522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017c8600 a2=fc6 a3=0 items=0 ppid=1797 pid=6522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:36:02.720000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:36:02.720000 audit[6522]: AVC avc: denied { watch } for pid=6522 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:02.720000 audit[6522]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c0017c8640 a2=fc6 a3=0 items=0 ppid=1797 pid=6522 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:36:02.720000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:36:04.349000 audit[6668]: NETFILTER_CFG table=filter:145 family=2 entries=15 op=nft_register_rule pid=6668 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:04.548074 kernel: kauditd_printk_skb: 21 callbacks suppressed Jul 15 11:36:04.575546 kernel: audit: type=1325 audit(1752579364.349:1798): table=filter:145 family=2 entries=15 op=nft_register_rule pid=6668 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:04.575615 kernel: audit: type=1300 audit(1752579364.349:1798): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff907c1940 a2=0 a3=7fff907c192c items=0 ppid=2231 pid=6668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:04.578137 kernel: audit: type=1327 audit(1752579364.349:1798): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:36:04.580675 kernel: audit: type=1325 audit(1752579364.384:1799): table=nat:146 family=2 entries=81 op=nft_register_chain pid=6668 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:04.588649 kernel: audit: type=1300 audit(1752579364.384:1799): arch=c000003e syscall=46 success=yes exit=37172 a0=3 a1=7fff907c1940 a2=0 a3=7fff907c192c items=0 ppid=2231 pid=6668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:04.588705 kernel: audit: type=1327 audit(1752579364.384:1799): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:36:04.594748 kernel: audit: type=1325 audit(1752579364.564:1800): table=filter:147 family=2 entries=8 op=nft_register_rule pid=6670 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:04.594869 kernel: audit: type=1300 audit(1752579364.564:1800): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc6d2863d0 a2=0 a3=7ffc6d2863bc items=0 ppid=2231 pid=6670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:04.594893 kernel: audit: type=1327 audit(1752579364.564:1800): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:36:04.596220 kernel: audit: type=1325 audit(1752579364.590:1801): table=nat:148 family=2 entries=26 op=nft_register_rule pid=6670 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:04.349000 audit[6668]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7fff907c1940 a2=0 a3=7fff907c192c items=0 ppid=2231 pid=6668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:04.349000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:36:04.384000 audit[6668]: NETFILTER_CFG table=nat:146 family=2 entries=81 op=nft_register_chain pid=6668 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:04.384000 audit[6668]: SYSCALL arch=c000003e syscall=46 success=yes exit=37172 a0=3 a1=7fff907c1940 a2=0 a3=7fff907c192c items=0 ppid=2231 pid=6668 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:04.384000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:36:04.564000 audit[6670]: NETFILTER_CFG table=filter:147 family=2 entries=8 op=nft_register_rule pid=6670 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:04.564000 audit[6670]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc6d2863d0 a2=0 a3=7ffc6d2863bc items=0 ppid=2231 pid=6670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:04.564000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:36:04.590000 audit[6670]: NETFILTER_CFG table=nat:148 family=2 entries=26 op=nft_register_rule pid=6670 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:04.590000 audit[6670]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffc6d2863d0 a2=0 a3=7ffc6d2863bc items=0 ppid=2231 pid=6670 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:04.590000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:36:04.944217 systemd[1]: Started sshd@19-139.178.70.108:22-147.75.109.163:37976.service. Jul 15 11:36:04.945000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.108:22-147.75.109.163:37976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:05.195000 audit[6672]: USER_ACCT pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:05.197000 audit[6672]: CRED_ACQ pid=6672 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:05.197000 audit[6672]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7fffe50be730 a2=3 a3=0 items=0 ppid=1 pid=6672 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=20 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:05.197000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:36:05.242827 sshd[6672]: Accepted publickey for core from 147.75.109.163 port 37976 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:36:05.206507 sshd[6672]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:36:05.279285 systemd-logind[1241]: New session 20 of user core. Jul 15 11:36:05.288000 audit[6672]: USER_START pid=6672 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:05.289000 audit[6674]: CRED_ACQ pid=6674 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:05.281362 systemd[1]: Started session-20.scope. Jul 15 11:36:05.729000 audit[6680]: NETFILTER_CFG table=filter:149 family=2 entries=8 op=nft_register_rule pid=6680 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:05.729000 audit[6680]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffdf9f2ae50 a2=0 a3=7ffdf9f2ae3c items=0 ppid=2231 pid=6680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:05.729000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:36:05.739000 audit[6680]: NETFILTER_CFG table=nat:150 family=2 entries=44 op=nft_unregister_chain pid=6680 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:05.739000 audit[6680]: SYSCALL arch=c000003e syscall=46 success=yes exit=12900 a0=3 a1=7ffdf9f2ae50 a2=0 a3=7ffdf9f2ae3c items=0 ppid=2231 pid=6680 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:05.739000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:36:08.479000 audit[4635]: AVC avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:36:08.479000 audit[4635]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002f61860 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:36:08.479000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:36:08.498000 audit[4455]: AVC avc: denied { watch } for pid=4455 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.2386388982/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c708,c859 tclass=file permissive=0 Jul 15 11:36:08.498000 audit[4455]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c0006ebde0 a2=fc6 a3=0 items=0 ppid=3777 pid=4455 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c708,c859 key=(null) Jul 15 11:36:08.498000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:36:14.499000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:14.760985 kernel: kauditd_printk_skb: 22 callbacks suppressed Jul 15 11:36:14.777287 kernel: audit: type=1400 audit(1752579374.499:1812): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:14.782825 kernel: audit: type=1300 audit(1752579374.499:1812): arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c016ed5230 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:36:14.782889 kernel: audit: type=1327 audit(1752579374.499:1812): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:36:14.782908 kernel: audit: type=1400 audit(1752579374.546:1813): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:14.785104 kernel: audit: type=1300 audit(1752579374.546:1813): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c016ed5470 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:36:14.785265 kernel: audit: type=1327 audit(1752579374.546:1813): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:36:14.786810 kernel: audit: type=1400 audit(1752579374.566:1814): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:14.789474 kernel: audit: type=1300 audit(1752579374.566:1814): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00f3717c0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:36:14.789504 kernel: audit: type=1327 audit(1752579374.566:1814): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:36:14.789521 kernel: audit: type=1400 audit(1752579374.566:1815): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:14.499000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7a a1=c016ed5230 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:36:14.499000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:36:14.546000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:14.546000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c016ed5470 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:36:14.546000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:36:14.566000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:14.566000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c00f3717c0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:36:14.566000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:36:14.566000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:14.566000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c010abff50 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:36:14.566000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:36:14.568000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:14.568000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c0140880f0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:36:14.568000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:36:14.577000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:14.577000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=76 a1=c0100d70e0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:36:14.577000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:36:25.044096 kernel: kauditd_printk_skb: 8 callbacks suppressed Jul 15 11:36:25.408789 kernel: audit: type=1400 audit(1752579385.038:1818): avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:36:25.477978 kernel: audit: type=1300 audit(1752579385.038:1818): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ad9880 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:36:25.478057 kernel: audit: type=1327 audit(1752579385.038:1818): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:36:25.038000 audit[5002]: AVC avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:36:25.038000 audit[5002]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000ad9880 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:36:25.038000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:36:41.149625 systemd[1]: cri-containerd-754897b2b2122791951574e957ac01f4a1baf982a137e935e8fdd5bfcc8dd0c8.scope: Deactivated successfully. Jul 15 11:36:41.516804 kernel: audit: type=1334 audit(1752579401.173:1819): prog-id=254 op=UNLOAD Jul 15 11:36:41.525445 kernel: audit: type=1334 audit(1752579401.180:1820): prog-id=251 op=UNLOAD Jul 15 11:36:41.529387 kernel: audit: type=1334 audit(1752579401.199:1821): prog-id=255 op=UNLOAD Jul 15 11:36:41.533032 kernel: audit: type=1334 audit(1752579401.203:1822): prog-id=258 op=UNLOAD Jul 15 11:36:41.173000 audit: BPF prog-id=254 op=UNLOAD Jul 15 11:36:41.180000 audit: BPF prog-id=251 op=UNLOAD Jul 15 11:36:41.199000 audit: BPF prog-id=255 op=UNLOAD Jul 15 11:36:41.203000 audit: BPF prog-id=258 op=UNLOAD Jul 15 11:36:41.577009 env[1251]: time="2025-07-15T11:36:41.302933867Z" level=info msg="shim disconnected" id=754897b2b2122791951574e957ac01f4a1baf982a137e935e8fdd5bfcc8dd0c8 Jul 15 11:36:41.577009 env[1251]: time="2025-07-15T11:36:41.302973847Z" level=warning msg="cleaning up after shim disconnected" id=754897b2b2122791951574e957ac01f4a1baf982a137e935e8fdd5bfcc8dd0c8 namespace=k8s.io Jul 15 11:36:41.577009 env[1251]: time="2025-07-15T11:36:41.302980410Z" level=info msg="cleaning up dead shim" Jul 15 11:36:41.577009 env[1251]: time="2025-07-15T11:36:41.309274747Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:36:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6735 runtime=io.containerd.runc.v2\n" Jul 15 11:36:41.577009 env[1251]: time="2025-07-15T11:36:41.320753882Z" level=info msg="shim disconnected" id=558f354eecae628cbff97f9a4e30175aff06fbb1a4089edf56660853a3c5d521 Jul 15 11:36:41.577009 env[1251]: time="2025-07-15T11:36:41.320790438Z" level=warning msg="cleaning up after shim disconnected" id=558f354eecae628cbff97f9a4e30175aff06fbb1a4089edf56660853a3c5d521 namespace=k8s.io Jul 15 11:36:41.577009 env[1251]: time="2025-07-15T11:36:41.320800181Z" level=info msg="cleaning up dead shim" Jul 15 11:36:41.577009 env[1251]: time="2025-07-15T11:36:41.328158005Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:36:41Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6747 runtime=io.containerd.runc.v2\n" Jul 15 11:36:41.200498 systemd[1]: cri-containerd-558f354eecae628cbff97f9a4e30175aff06fbb1a4089edf56660853a3c5d521.scope: Deactivated successfully. Jul 15 11:36:41.200654 systemd[1]: cri-containerd-558f354eecae628cbff97f9a4e30175aff06fbb1a4089edf56660853a3c5d521.scope: Consumed 1.241s CPU time. Jul 15 11:36:41.359525 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-558f354eecae628cbff97f9a4e30175aff06fbb1a4089edf56660853a3c5d521-rootfs.mount: Deactivated successfully. Jul 15 11:36:41.359612 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-754897b2b2122791951574e957ac01f4a1baf982a137e935e8fdd5bfcc8dd0c8-rootfs.mount: Deactivated successfully. Jul 15 11:36:42.626765 systemd[1]: cri-containerd-ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413.scope: Deactivated successfully. Jul 15 11:36:42.628471 kernel: audit: type=1334 audit(1752579402.625:1823): prog-id=247 op=UNLOAD Jul 15 11:36:42.635225 kernel: audit: type=1334 audit(1752579402.628:1824): prog-id=250 op=UNLOAD Jul 15 11:36:42.625000 audit: BPF prog-id=247 op=UNLOAD Jul 15 11:36:42.628000 audit: BPF prog-id=250 op=UNLOAD Jul 15 11:36:42.626965 systemd[1]: cri-containerd-ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413.scope: Consumed 1.226s CPU time. Jul 15 11:36:42.722295 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413-rootfs.mount: Deactivated successfully. Jul 15 11:36:42.774262 env[1251]: time="2025-07-15T11:36:42.774218755Z" level=info msg="shim disconnected" id=ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413 Jul 15 11:36:42.774814 env[1251]: time="2025-07-15T11:36:42.774797321Z" level=warning msg="cleaning up after shim disconnected" id=ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413 namespace=k8s.io Jul 15 11:36:42.774905 env[1251]: time="2025-07-15T11:36:42.774890668Z" level=info msg="cleaning up dead shim" Jul 15 11:36:42.787964 env[1251]: time="2025-07-15T11:36:42.787931309Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:36:42Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6769 runtime=io.containerd.runc.v2\n" Jul 15 11:36:43.966877 update_engine[1243]: I0715 11:36:43.963647 1243 prefs.cc:52] certificate-report-to-send-update not present in /var/lib/update_engine/prefs Jul 15 11:36:43.966877 update_engine[1243]: I0715 11:36:43.966821 1243 prefs.cc:52] certificate-report-to-send-download not present in /var/lib/update_engine/prefs Jul 15 11:36:43.986476 update_engine[1243]: I0715 11:36:43.986271 1243 prefs.cc:52] aleph-version not present in /var/lib/update_engine/prefs Jul 15 11:36:43.990412 update_engine[1243]: I0715 11:36:43.990352 1243 omaha_request_params.cc:62] Current group set to lts Jul 15 11:36:44.002782 update_engine[1243]: I0715 11:36:44.002579 1243 update_attempter.cc:499] Already updated boot flags. Skipping. Jul 15 11:36:44.002782 update_engine[1243]: I0715 11:36:44.002607 1243 update_attempter.cc:643] Scheduling an action processor start. Jul 15 11:36:44.004067 update_engine[1243]: I0715 11:36:44.004019 1243 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 15 11:36:44.008445 update_engine[1243]: I0715 11:36:44.008277 1243 prefs.cc:52] previous-version not present in /var/lib/update_engine/prefs Jul 15 11:36:44.008445 update_engine[1243]: I0715 11:36:44.008378 1243 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 15 11:36:44.008445 update_engine[1243]: I0715 11:36:44.008384 1243 omaha_request_action.cc:271] Request: Jul 15 11:36:44.008445 update_engine[1243]: Jul 15 11:36:44.008445 update_engine[1243]: Jul 15 11:36:44.008445 update_engine[1243]: Jul 15 11:36:44.008445 update_engine[1243]: Jul 15 11:36:44.008445 update_engine[1243]: Jul 15 11:36:44.008445 update_engine[1243]: Jul 15 11:36:44.008445 update_engine[1243]: Jul 15 11:36:44.008445 update_engine[1243]: Jul 15 11:36:44.008445 update_engine[1243]: I0715 11:36:44.008388 1243 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 15 11:36:44.157709 update_engine[1243]: I0715 11:36:44.157568 1243 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 15 11:36:44.159377 update_engine[1243]: E0715 11:36:44.158818 1243 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 15 11:36:44.159377 update_engine[1243]: I0715 11:36:44.158890 1243 libcurl_http_fetcher.cc:283] No HTTP response, retry 1 Jul 15 11:36:44.163375 locksmithd[1296]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_CHECKING_FOR_UPDATE" NewVersion=0.0.0 NewSize=0 Jul 15 11:36:47.942453 systemd[1]: run-containerd-runc-k8s.io-17d067fd24c22b7d111623073fa6bab401e042df034cd1cc18965f11b0fcf9f5-runc.BEcP06.mount: Deactivated successfully. Jul 15 11:36:48.437242 kubelet[2123]: I0715 11:36:48.437210 2123 scope.go:117] "RemoveContainer" containerID="2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f" Jul 15 11:36:48.852395 kubelet[2123]: E0715 11:36:48.801084 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="42.613s" Jul 15 11:36:48.912610 env[1251]: time="2025-07-15T11:36:48.912370979Z" level=info msg="RemoveContainer for \"2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f\"" Jul 15 11:36:48.935078 env[1251]: time="2025-07-15T11:36:48.935047008Z" level=info msg="RemoveContainer for \"2626281ee9834eaf5a9775e3de3db6d00699dfe86212871adb76e8dd90c2fc3f\" returns successfully" Jul 15 11:36:49.458172 kubelet[2123]: I0715 11:36:49.458146 2123 scope.go:117] "RemoveContainer" containerID="267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5" Jul 15 11:36:49.510856 kubelet[2123]: I0715 11:36:49.510831 2123 scope.go:117] "RemoveContainer" containerID="ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413" Jul 15 11:36:49.529662 kubelet[2123]: E0715 11:36:49.529490 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"kube-scheduler\" with CrashLoopBackOff: \"back-off 10s restarting failed container=kube-scheduler pod=kube-scheduler-localhost_kube-system(834ee54f1daa06092e339273649eb5ea)\"" pod="kube-system/kube-scheduler-localhost" podUID="834ee54f1daa06092e339273649eb5ea" Jul 15 11:36:49.577828 sshd[6672]: pam_unix(sshd:session): session closed for user core Jul 15 11:36:49.607853 kernel: audit: type=1130 audit(1752579409.598:1825): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.108:22-147.75.109.163:53492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:49.598000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.108:22-147.75.109.163:53492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:49.705838 kernel: audit: type=1106 audit(1752579409.694:1826): pid=6672 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:49.705895 kernel: audit: type=1104 audit(1752579409.701:1827): pid=6672 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:49.709208 kernel: audit: type=1131 audit(1752579409.701:1828): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.108:22-147.75.109.163:37976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:49.694000 audit[6672]: USER_END pid=6672 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:49.701000 audit[6672]: CRED_DISP pid=6672 uid=0 auid=500 ses=20 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:49.701000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@19-139.178.70.108:22-147.75.109.163:37976 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:49.718810 kernel: audit: type=1334 audit(1752579409.711:1829): prog-id=201 op=UNLOAD Jul 15 11:36:49.719762 kernel: audit: type=1334 audit(1752579409.715:1830): prog-id=204 op=UNLOAD Jul 15 11:36:49.711000 audit: BPF prog-id=201 op=UNLOAD Jul 15 11:36:49.715000 audit: BPF prog-id=204 op=UNLOAD Jul 15 11:36:49.595053 systemd[1]: Started sshd@20-139.178.70.108:22-147.75.109.163:53492.service. Jul 15 11:36:49.737745 env[1251]: time="2025-07-15T11:36:49.611391622Z" level=info msg="StopContainer for \"f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c\" with timeout 30 (s)" Jul 15 11:36:49.737745 env[1251]: time="2025-07-15T11:36:49.643781267Z" level=info msg="Stop container \"f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c\" with signal terminated" Jul 15 11:36:49.737745 env[1251]: time="2025-07-15T11:36:49.733846323Z" level=info msg="shim disconnected" id=f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c Jul 15 11:36:49.737745 env[1251]: time="2025-07-15T11:36:49.733876154Z" level=warning msg="cleaning up after shim disconnected" id=f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c namespace=k8s.io Jul 15 11:36:49.737745 env[1251]: time="2025-07-15T11:36:49.733881840Z" level=info msg="cleaning up dead shim" Jul 15 11:36:49.704064 systemd[1]: sshd@19-139.178.70.108:22-147.75.109.163:37976.service: Deactivated successfully. Jul 15 11:36:49.707030 systemd[1]: session-20.scope: Deactivated successfully. Jul 15 11:36:49.707122 systemd[1]: session-20.scope: Consumed 2.479s CPU time. Jul 15 11:36:49.711304 systemd-logind[1241]: Session 20 logged out. Waiting for processes to exit. Jul 15 11:36:49.711995 systemd-logind[1241]: Removed session 20. Jul 15 11:36:49.712712 systemd[1]: cri-containerd-f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c.scope: Deactivated successfully. Jul 15 11:36:49.712885 systemd[1]: cri-containerd-f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c.scope: Consumed 1.056s CPU time. Jul 15 11:36:49.732704 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c-rootfs.mount: Deactivated successfully. Jul 15 11:36:49.746680 env[1251]: time="2025-07-15T11:36:49.746654136Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:36:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6903 runtime=io.containerd.runc.v2\n" Jul 15 11:36:49.762904 env[1251]: time="2025-07-15T11:36:49.762876625Z" level=info msg="StopContainer for \"f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c\" returns successfully" Jul 15 11:36:49.785786 sshd[6882]: Accepted publickey for core from 147.75.109.163 port 53492 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:36:49.789500 kernel: audit: type=1101 audit(1752579409.784:1831): pid=6882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:49.784000 audit[6882]: USER_ACCT pid=6882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:49.788000 audit[6882]: CRED_ACQ pid=6882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:49.792271 sshd[6882]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:36:49.793353 kernel: audit: type=1103 audit(1752579409.788:1832): pid=6882 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:49.788000 audit[6882]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc95b2fa00 a2=3 a3=0 items=0 ppid=1 pid=6882 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:49.803433 kernel: audit: type=1006 audit(1752579409.788:1833): pid=6882 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=21 res=1 Jul 15 11:36:49.803477 kernel: audit: type=1300 audit(1752579409.788:1833): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc95b2fa00 a2=3 a3=0 items=0 ppid=1 pid=6882 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=21 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:49.788000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:36:49.815059 env[1251]: time="2025-07-15T11:36:49.812717817Z" level=info msg="StopPodSandbox for \"152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab\"" Jul 15 11:36:49.815059 env[1251]: time="2025-07-15T11:36:49.812771899Z" level=info msg="Container to stop \"f93ba97f73a554bae86c0e024c7279b9e769fd2e1e73660150e709169e7de84c\" must be in running or unknown state, current state \"CONTAINER_EXITED\"" Jul 15 11:36:49.816948 env[1251]: time="2025-07-15T11:36:49.815314110Z" level=info msg="RemoveContainer for \"267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5\"" Jul 15 11:36:49.815663 systemd[1]: run-containerd-io.containerd.grpc.v1.cri-sandboxes-152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab-shm.mount: Deactivated successfully. Jul 15 11:36:49.826355 env[1251]: time="2025-07-15T11:36:49.826322987Z" level=info msg="RemoveContainer for \"267cbb7ec7feb238e2fe8eb1204eeb31e2d98eb28aa5d586baeaac155bd00ae5\" returns successfully" Jul 15 11:36:49.832127 kubelet[2123]: I0715 11:36:49.832111 2123 scope.go:117] "RemoveContainer" containerID="60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab" Jul 15 11:36:49.833857 systemd[1]: Started session-21.scope. Jul 15 11:36:49.834284 systemd-logind[1241]: New session 21 of user core. Jul 15 11:36:49.835717 kubelet[2123]: I0715 11:36:49.834337 2123 scope.go:117] "RemoveContainer" containerID="60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab" Jul 15 11:36:49.835717 kubelet[2123]: I0715 11:36:49.834667 2123 scope.go:117] "RemoveContainer" containerID="558f354eecae628cbff97f9a4e30175aff06fbb1a4089edf56660853a3c5d521" Jul 15 11:36:49.835717 kubelet[2123]: E0715 11:36:49.834765 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"kube-controller-manager\" with CrashLoopBackOff: \"back-off 10s restarting failed container=kube-controller-manager pod=kube-controller-manager-localhost_kube-system(84b858ec27c8b2738b1d9ff9927e0dcb)\"" pod="kube-system/kube-controller-manager-localhost" podUID="84b858ec27c8b2738b1d9ff9927e0dcb" Jul 15 11:36:49.836033 systemd[1]: cri-containerd-152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab.scope: Deactivated successfully. Jul 15 11:36:49.834000 audit: BPF prog-id=165 op=UNLOAD Jul 15 11:36:49.839000 audit: BPF prog-id=168 op=UNLOAD Jul 15 11:36:49.841000 audit[6882]: USER_START pid=6882 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:49.843000 audit[6923]: CRED_ACQ pid=6923 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:49.845321 env[1251]: time="2025-07-15T11:36:49.845051211Z" level=info msg="RemoveContainer for \"60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab\"" Jul 15 11:36:49.845790 env[1251]: time="2025-07-15T11:36:49.845749706Z" level=info msg="RemoveContainer for \"60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab\"" Jul 15 11:36:49.847692 env[1251]: time="2025-07-15T11:36:49.847451089Z" level=error msg="RemoveContainer for \"60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab\" failed" error="failed to set removing state for container \"60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab\": container is already in removing state" Jul 15 11:36:49.850638 env[1251]: time="2025-07-15T11:36:49.850617184Z" level=info msg="RemoveContainer for \"60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab\" returns successfully" Jul 15 11:36:49.853033 kubelet[2123]: I0715 11:36:49.853009 2123 scope.go:117] "RemoveContainer" containerID="754897b2b2122791951574e957ac01f4a1baf982a137e935e8fdd5bfcc8dd0c8" Jul 15 11:36:49.853170 kubelet[2123]: E0715 11:36:49.853151 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"tigera-operator\" with CrashLoopBackOff: \"back-off 10s restarting failed container=tigera-operator pod=tigera-operator-747864d56d-k4w6z_tigera-operator(eaf7fd0f-e676-40ee-9107-2612911d9533)\"" pod="tigera-operator/tigera-operator-747864d56d-k4w6z" podUID="eaf7fd0f-e676-40ee-9107-2612911d9533" Jul 15 11:36:49.854140 kubelet[2123]: I0715 11:36:49.853548 2123 scope.go:117] "RemoveContainer" containerID="6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7" Jul 15 11:36:49.857488 env[1251]: time="2025-07-15T11:36:49.857467041Z" level=info msg="RemoveContainer for \"6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7\"" Jul 15 11:36:49.868722 env[1251]: time="2025-07-15T11:36:49.868699422Z" level=info msg="RemoveContainer for \"6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7\" returns successfully" Jul 15 11:36:49.871254 systemd[1]: run-containerd-io.containerd.runtime.v2.task-k8s.io-152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab-rootfs.mount: Deactivated successfully. Jul 15 11:36:49.872429 env[1251]: time="2025-07-15T11:36:49.872405607Z" level=info msg="shim disconnected" id=152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab Jul 15 11:36:49.872957 env[1251]: time="2025-07-15T11:36:49.872943983Z" level=warning msg="cleaning up after shim disconnected" id=152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab namespace=k8s.io Jul 15 11:36:49.873035 env[1251]: time="2025-07-15T11:36:49.873024147Z" level=info msg="cleaning up dead shim" Jul 15 11:36:49.877136 kubelet[2123]: E0715 11:36:49.865181 2123 log.go:32] "RemoveContainer from runtime service failed" err="rpc error: code = Unknown desc = failed to set removing state for container \"60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab\": container is already in removing state" containerID="60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab" Jul 15 11:36:49.877279 kubelet[2123]: I0715 11:36:49.877256 2123 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab"} err="rpc error: code = Unknown desc = failed to set removing state for container \"60306c5e9283a746d8fe52ac2b0cef848b5d19ddcd7d479ffa88d7809794fdab\": container is already in removing state" Jul 15 11:36:49.877357 kubelet[2123]: I0715 11:36:49.877348 2123 scope.go:117] "RemoveContainer" containerID="6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7" Jul 15 11:36:49.882003 env[1251]: time="2025-07-15T11:36:49.881977716Z" level=warning msg="cleanup warnings time=\"2025-07-15T11:36:49Z\" level=info msg=\"starting signal loop\" namespace=k8s.io pid=6936 runtime=io.containerd.runc.v2\n" Jul 15 11:36:49.906856 env[1251]: time="2025-07-15T11:36:49.906771731Z" level=error msg="ContainerStatus for \"6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7\" failed" error="rpc error: code = NotFound desc = an error occurred when try to find container \"6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7\": not found" Jul 15 11:36:49.923542 kubelet[2123]: E0715 11:36:49.923522 2123 log.go:32] "ContainerStatus from runtime service failed" err="rpc error: code = NotFound desc = an error occurred when try to find container \"6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7\": not found" containerID="6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7" Jul 15 11:36:49.924628 kubelet[2123]: I0715 11:36:49.924603 2123 pod_container_deletor.go:53] "DeleteContainer returned error" containerID={"Type":"containerd","ID":"6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7"} err="failed to get container status \"6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7\": rpc error: code = NotFound desc = an error occurred when try to find container \"6adb4740e2e92d1315d465794ee7360adf46031b994e4aa30873d4422b6fabb7\": not found" Jul 15 11:36:49.937637 env[1251]: time="2025-07-15T11:36:49.937596391Z" level=info msg="StopPodSandbox for \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\"" Jul 15 11:36:50.577440 systemd-networkd[1057]: calib8d3a053426: Link DOWN Jul 15 11:36:50.577447 systemd-networkd[1057]: calib8d3a053426: Lost carrier Jul 15 11:36:50.844000 audit[7005]: NETFILTER_CFG table=filter:151 family=2 entries=55 op=nft_register_rule pid=7005 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:36:50.844000 audit[7005]: SYSCALL arch=c000003e syscall=46 success=yes exit=8928 a0=3 a1=7ffd8dab1f80 a2=0 a3=7ffd8dab1f6c items=0 ppid=3463 pid=7005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:50.844000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:36:50.844000 audit[7005]: NETFILTER_CFG table=filter:152 family=2 entries=2 op=nft_unregister_chain pid=7005 subj=system_u:system_r:kernel_t:s0 comm="iptables-nft-re" Jul 15 11:36:50.844000 audit[7005]: SYSCALL arch=c000003e syscall=46 success=yes exit=304 a0=3 a1=7ffd8dab1f80 a2=0 a3=559b86a30000 items=0 ppid=3463 pid=7005 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-nft-re" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:50.844000 audit: PROCTITLE proctitle=69707461626C65732D6E66742D726573746F7265002D2D6E6F666C757368002D2D766572626F7365002D2D77616974003130002D2D776169742D696E74657276616C003530303030 Jul 15 11:36:51.128125 sshd[6882]: pam_unix(sshd:session): session closed for user core Jul 15 11:36:51.152000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.108:22-147.75.109.163:53506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:51.158000 audit[6882]: USER_END pid=6882 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:51.161000 audit[6882]: CRED_DISP pid=6882 uid=0 auid=500 ses=21 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:51.163000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@20-139.178.70.108:22-147.75.109.163:53492 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:51.153497 systemd[1]: Started sshd@21-139.178.70.108:22-147.75.109.163:53506.service. Jul 15 11:36:51.163549 systemd[1]: sshd@20-139.178.70.108:22-147.75.109.163:53492.service: Deactivated successfully. Jul 15 11:36:51.165659 systemd[1]: session-21.scope: Deactivated successfully. Jul 15 11:36:51.166361 systemd-logind[1241]: Session 21 logged out. Waiting for processes to exit. Jul 15 11:36:51.167834 systemd-logind[1241]: Removed session 21. Jul 15 11:36:51.343000 audit[7009]: USER_ACCT pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:51.346000 audit[7009]: CRED_ACQ pid=7009 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:51.346000 audit[7009]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffd80d1e070 a2=3 a3=0 items=0 ppid=1 pid=7009 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=22 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:51.346000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:36:51.360311 sshd[7009]: Accepted publickey for core from 147.75.109.163 port 53506 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:36:51.352991 sshd[7009]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:36:51.386762 systemd-logind[1241]: New session 22 of user core. Jul 15 11:36:51.390000 audit[7009]: USER_START pid=7009 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:51.387584 systemd[1]: Started session-22.scope. Jul 15 11:36:51.394000 audit[7015]: CRED_ACQ pid=7015 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:50.532 [INFO][6971] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:50.533 [INFO][6971] cni-plugin/dataplane_linux.go 559: Deleting workload's device in netns. ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" iface="eth0" netns="/var/run/netns/cni-92f7c7f1-cdb9-d320-a04f-25b6cc7d760e" Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:50.533 [INFO][6971] cni-plugin/dataplane_linux.go 570: Entered netns, deleting veth. ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" iface="eth0" netns="/var/run/netns/cni-92f7c7f1-cdb9-d320-a04f-25b6cc7d760e" Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:50.549 [INFO][6971] cni-plugin/dataplane_linux.go 604: Deleted device in netns. ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" after=15.919618ms iface="eth0" netns="/var/run/netns/cni-92f7c7f1-cdb9-d320-a04f-25b6cc7d760e" Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:50.549 [INFO][6971] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:50.549 [INFO][6971] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:51.229 [INFO][6988] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" HandleID="k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:51.235 [INFO][6988] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:51.235 [INFO][6988] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:51.480 [INFO][6988] ipam/ipam_plugin.go 431: Released address using handleID ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" HandleID="k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:51.480 [INFO][6988] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" HandleID="k8s-pod-network.152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Workload="localhost-k8s-calico--apiserver--6db74f8486--2rx6m-eth0" Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:51.482 [INFO][6988] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:36:51.512103 env[1251]: 2025-07-15 11:36:51.488 [INFO][6971] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:50.509 [WARNING][6970] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:50.517 [INFO][6970] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:50.517 [INFO][6970] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" iface="eth0" netns="" Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:50.518 [INFO][6970] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:50.518 [INFO][6970] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:51.229 [INFO][6986] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:51.235 [INFO][6986] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:51.482 [INFO][6986] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:51.489 [WARNING][6986] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:51.489 [INFO][6986] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:51.490 [INFO][6986] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:36:51.522706 env[1251]: 2025-07-15 11:36:51.492 [INFO][6970] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:36:51.522706 env[1251]: time="2025-07-15T11:36:51.513520354Z" level=info msg="TearDown network for sandbox \"152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab\" successfully" Jul 15 11:36:51.522706 env[1251]: time="2025-07-15T11:36:51.513542112Z" level=info msg="StopPodSandbox for \"152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab\" returns successfully" Jul 15 11:36:51.522706 env[1251]: time="2025-07-15T11:36:51.513660337Z" level=info msg="TearDown network for sandbox \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\" successfully" Jul 15 11:36:51.522706 env[1251]: time="2025-07-15T11:36:51.513674686Z" level=info msg="StopPodSandbox for \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\" returns successfully" Jul 15 11:36:51.526736 systemd[1]: run-netns-cni\x2d92f7c7f1\x2dcdb9\x2dd320\x2da04f\x2d25b6cc7d760e.mount: Deactivated successfully. Jul 15 11:36:51.669704 env[1251]: time="2025-07-15T11:36:51.669485467Z" level=info msg="RemovePodSandbox for \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\"" Jul 15 11:36:51.669704 env[1251]: time="2025-07-15T11:36:51.669513326Z" level=info msg="Forcibly stopping sandbox \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\"" Jul 15 11:36:51.973572 kubelet[2123]: I0715 11:36:51.971900 2123 pod_container_deletor.go:80] "Container not found in pod's containers" containerID="152b1e87a7d9248cef5b1ae78d03a714b6c665f49e545ab5e11abe7655aa1cab" Jul 15 11:36:52.028939 kubelet[2123]: I0715 11:36:52.028920 2123 scope.go:117] "RemoveContainer" containerID="558f354eecae628cbff97f9a4e30175aff06fbb1a4089edf56660853a3c5d521" Jul 15 11:36:52.046629 kubelet[2123]: I0715 11:36:52.046478 2123 scope.go:117] "RemoveContainer" containerID="ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413" Jul 15 11:36:52.239398 kubelet[2123]: E0715 11:36:52.165551 2123 pod_workers.go:1301] "Error syncing pod, skipping" err="failed to \"StartContainer\" for \"kube-scheduler\" with CrashLoopBackOff: \"back-off 10s restarting failed container=kube-scheduler pod=kube-scheduler-localhost_kube-system(834ee54f1daa06092e339273649eb5ea)\"" pod="kube-system/kube-scheduler-localhost" podUID="834ee54f1daa06092e339273649eb5ea" Jul 15 11:36:52.265346 kubelet[2123]: I0715 11:36:52.265307 2123 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/864a889c-657c-4971-80d3-beba352cc850-calico-apiserver-certs\") pod \"864a889c-657c-4971-80d3-beba352cc850\" (UID: \"864a889c-657c-4971-80d3-beba352cc850\") " Jul 15 11:36:52.267099 kubelet[2123]: I0715 11:36:52.265491 2123 reconciler_common.go:162] "operationExecutor.UnmountVolume started for volume \"kube-api-access-2cjmm\" (UniqueName: \"kubernetes.io/projected/864a889c-657c-4971-80d3-beba352cc850-kube-api-access-2cjmm\") pod \"864a889c-657c-4971-80d3-beba352cc850\" (UID: \"864a889c-657c-4971-80d3-beba352cc850\") " Jul 15 11:36:52.367885 env[1251]: time="2025-07-15T11:36:52.367811265Z" level=info msg="CreateContainer within sandbox \"486569508d95cb6a98b616df557f2b505cb608f7851f58cb36ad59bbb823e1fc\" for container &ContainerMetadata{Name:kube-controller-manager,Attempt:2,}" Jul 15 11:36:52.459352 systemd[1]: var-lib-kubelet-pods-864a889c\x2d657c\x2d4971\x2d80d3\x2dbeba352cc850-volumes-kubernetes.io\x7esecret-calico\x2dapiserver\x2dcerts.mount: Deactivated successfully. Jul 15 11:36:52.462892 systemd[1]: var-lib-kubelet-pods-864a889c\x2d657c\x2d4971\x2d80d3\x2dbeba352cc850-volumes-kubernetes.io\x7eprojected-kube\x2dapi\x2daccess\x2d2cjmm.mount: Deactivated successfully. Jul 15 11:36:52.486367 kubelet[2123]: I0715 11:36:52.463871 2123 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/secret/864a889c-657c-4971-80d3-beba352cc850-calico-apiserver-certs" (OuterVolumeSpecName: "calico-apiserver-certs") pod "864a889c-657c-4971-80d3-beba352cc850" (UID: "864a889c-657c-4971-80d3-beba352cc850"). InnerVolumeSpecName "calico-apiserver-certs". PluginName "kubernetes.io/secret", VolumeGIDValue "" Jul 15 11:36:52.486367 kubelet[2123]: I0715 11:36:52.463477 2123 operation_generator.go:781] UnmountVolume.TearDown succeeded for volume "kubernetes.io/projected/864a889c-657c-4971-80d3-beba352cc850-kube-api-access-2cjmm" (OuterVolumeSpecName: "kube-api-access-2cjmm") pod "864a889c-657c-4971-80d3-beba352cc850" (UID: "864a889c-657c-4971-80d3-beba352cc850"). InnerVolumeSpecName "kube-api-access-2cjmm". PluginName "kubernetes.io/projected", VolumeGIDValue "" Jul 15 11:36:52.511276 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3689384955.mount: Deactivated successfully. Jul 15 11:36:52.516334 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount3700436710.mount: Deactivated successfully. Jul 15 11:36:52.525280 env[1251]: time="2025-07-15T11:36:52.525250869Z" level=info msg="CreateContainer within sandbox \"486569508d95cb6a98b616df557f2b505cb608f7851f58cb36ad59bbb823e1fc\" for &ContainerMetadata{Name:kube-controller-manager,Attempt:2,} returns container id \"3cb8fef1cae0f3ab2e3854c6c599e5913c3429b4c5ee91d8f04fe8ab2dd72c54\"" Jul 15 11:36:52.568822 kubelet[2123]: I0715 11:36:52.568797 2123 reconciler_common.go:299] "Volume detached for volume \"calico-apiserver-certs\" (UniqueName: \"kubernetes.io/secret/864a889c-657c-4971-80d3-beba352cc850-calico-apiserver-certs\") on node \"localhost\" DevicePath \"\"" Jul 15 11:36:52.570474 kubelet[2123]: I0715 11:36:52.569012 2123 reconciler_common.go:299] "Volume detached for volume \"kube-api-access-2cjmm\" (UniqueName: \"kubernetes.io/projected/864a889c-657c-4971-80d3-beba352cc850-kube-api-access-2cjmm\") on node \"localhost\" DevicePath \"\"" Jul 15 11:36:52.588405 env[1251]: time="2025-07-15T11:36:52.588380527Z" level=info msg="StartContainer for \"3cb8fef1cae0f3ab2e3854c6c599e5913c3429b4c5ee91d8f04fe8ab2dd72c54\"" Jul 15 11:36:52.684872 systemd[1]: Started cri-containerd-3cb8fef1cae0f3ab2e3854c6c599e5913c3429b4c5ee91d8f04fe8ab2dd72c54.scope. Jul 15 11:36:52.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit: BPF prog-id=259 op=LOAD Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000147c48 a2=10 a3=1c items=0 ppid=1797 pid=7055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:52.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363623866656631636165306633616232653338353463366335393965 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001476b0 a2=3c a3=8 items=0 ppid=1797 pid=7055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:52.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363623866656631636165306633616232653338353463366335393965 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit: BPF prog-id=260 op=LOAD Jul 15 11:36:52.782000 audit[7055]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001479d8 a2=78 a3=c000214970 items=0 ppid=1797 pid=7055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:52.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363623866656631636165306633616232653338353463366335393965 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit: BPF prog-id=261 op=LOAD Jul 15 11:36:52.782000 audit[7055]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000147770 a2=78 a3=c0002149b8 items=0 ppid=1797 pid=7055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:52.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363623866656631636165306633616232653338353463366335393965 Jul 15 11:36:52.782000 audit: BPF prog-id=261 op=UNLOAD Jul 15 11:36:52.782000 audit: BPF prog-id=260 op=UNLOAD Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { perfmon } for pid=7055 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit[7055]: AVC avc: denied { bpf } for pid=7055 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:52.782000 audit: BPF prog-id=262 op=LOAD Jul 15 11:36:52.782000 audit[7055]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000147c30 a2=78 a3=c000214dc8 items=0 ppid=1797 pid=7055 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:52.782000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3363623866656631636165306633616232653338353463366335393965 Jul 15 11:36:53.007528 env[1251]: time="2025-07-15T11:36:52.826183436Z" level=info msg="StartContainer for \"3cb8fef1cae0f3ab2e3854c6c599e5913c3429b4c5ee91d8f04fe8ab2dd72c54\" returns successfully" Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:52.138 [WARNING][7029] cni-plugin/k8s.go 598: WorkloadEndpoint does not exist in the datastore, moving forward with the clean up ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" WorkloadEndpoint="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:52.139 [INFO][7029] cni-plugin/k8s.go 640: Cleaning up netns ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:52.139 [INFO][7029] cni-plugin/dataplane_linux.go 555: CleanUpNamespace called with no netns name, ignoring. ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" iface="eth0" netns="" Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:52.139 [INFO][7029] cni-plugin/k8s.go 647: Releasing IP address(es) ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:52.139 [INFO][7029] cni-plugin/utils.go 188: Calico CNI releasing IP address ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:52.758 [INFO][7039] ipam/ipam_plugin.go 412: Releasing address using handleID ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:52.804 [INFO][7039] ipam/ipam_plugin.go 353: About to acquire host-wide IPAM lock. Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:52.807 [INFO][7039] ipam/ipam_plugin.go 368: Acquired host-wide IPAM lock. Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:53.174 [WARNING][7039] ipam/ipam_plugin.go 429: Asked to release address but it doesn't exist. Ignoring ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:53.174 [INFO][7039] ipam/ipam_plugin.go 440: Releasing address using workloadID ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" HandleID="k8s-pod-network.4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Workload="localhost-k8s-calico--apiserver--6db74f8486--272tj-eth0" Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:53.176 [INFO][7039] ipam/ipam_plugin.go 374: Released host-wide IPAM lock. Jul 15 11:36:53.262545 env[1251]: 2025-07-15 11:36:53.219 [INFO][7029] cni-plugin/k8s.go 653: Teardown processing complete. ContainerID="4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6" Jul 15 11:36:53.269775 env[1251]: time="2025-07-15T11:36:53.262690483Z" level=info msg="TearDown network for sandbox \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\" successfully" Jul 15 11:36:53.302759 env[1251]: time="2025-07-15T11:36:53.302727318Z" level=info msg="RemovePodSandbox \"4d205c8f1e5156cba2d8e74ab593d981d482ba6cfe10b37d93eb78777bdea8e6\" returns successfully" Jul 15 11:36:53.451000 audit[7083]: NETFILTER_CFG table=filter:153 family=2 entries=20 op=nft_register_rule pid=7083 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:53.451000 audit[7083]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7ffcc275ce00 a2=0 a3=7ffcc275cdec items=0 ppid=2231 pid=7083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:53.451000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:36:53.464000 audit[7083]: NETFILTER_CFG table=nat:154 family=2 entries=26 op=nft_register_rule pid=7083 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:36:53.464000 audit[7083]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7ffcc275ce00 a2=0 a3=0 items=0 ppid=2231 pid=7083 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:53.464000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:36:53.530228 systemd[1]: run-containerd-runc-k8s.io-3cb8fef1cae0f3ab2e3854c6c599e5913c3429b4c5ee91d8f04fe8ab2dd72c54-runc.1764Nd.mount: Deactivated successfully. Jul 15 11:36:53.566199 systemd[1]: Started sshd@22-139.178.70.108:22-147.75.109.163:53512.service. Jul 15 11:36:53.567000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.108:22-147.75.109.163:53512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:53.578647 sshd[7009]: pam_unix(sshd:session): session closed for user core Jul 15 11:36:53.601000 audit[7009]: USER_END pid=7009 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:53.605000 audit[7009]: CRED_DISP pid=7009 uid=0 auid=500 ses=22 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:53.628546 systemd[1]: sshd@21-139.178.70.108:22-147.75.109.163:53506.service: Deactivated successfully. Jul 15 11:36:53.627000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@21-139.178.70.108:22-147.75.109.163:53506 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:53.629094 systemd[1]: session-22.scope: Deactivated successfully. Jul 15 11:36:53.630353 systemd-logind[1241]: Session 22 logged out. Waiting for processes to exit. Jul 15 11:36:53.631004 systemd-logind[1241]: Removed session 22. Jul 15 11:36:53.704000 audit[7085]: USER_ACCT pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:53.705000 audit[7085]: CRED_ACQ pid=7085 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:53.705000 audit[7085]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc748896a0 a2=3 a3=0 items=0 ppid=1 pid=7085 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=23 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:53.705000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:36:53.712726 sshd[7085]: Accepted publickey for core from 147.75.109.163 port 53512 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:36:53.710364 sshd[7085]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:36:53.749440 systemd[1]: Started session-23.scope. Jul 15 11:36:53.749941 systemd-logind[1241]: New session 23 of user core. Jul 15 11:36:53.757000 audit[7085]: USER_START pid=7085 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:53.759000 audit[7088]: CRED_ACQ pid=7088 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:54.456660 systemd[1]: run-containerd-runc-k8s.io-ca94c2df2b1a8bef147e6bce17b6e793832287a4239ffe13a946e17b32e202a2-runc.HpV5ge.mount: Deactivated successfully. Jul 15 11:36:54.677919 systemd[1]: Removed slice kubepods-besteffort-pod864a889c_657c_4971_80d3_beba352cc850.slice. Jul 15 11:36:54.677981 systemd[1]: kubepods-besteffort-pod864a889c_657c_4971_80d3_beba352cc850.slice: Consumed 1.081s CPU time. Jul 15 11:36:54.761021 systemd[1]: run-containerd-runc-k8s.io-17d067fd24c22b7d111623073fa6bab401e042df034cd1cc18965f11b0fcf9f5-runc.gGJP8w.mount: Deactivated successfully. Jul 15 11:36:54.903912 update_engine[1243]: I0715 11:36:54.901062 1243 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 15 11:36:54.924254 update_engine[1243]: I0715 11:36:54.923408 1243 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 15 11:36:54.924504 update_engine[1243]: E0715 11:36:54.924479 1243 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 15 11:36:54.925011 update_engine[1243]: I0715 11:36:54.924568 1243 libcurl_http_fetcher.cc:283] No HTTP response, retry 2 Jul 15 11:36:55.218367 kernel: kauditd_printk_skb: 96 callbacks suppressed Jul 15 11:36:55.243726 kernel: audit: type=1400 audit(1752579415.212:1878): avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:55.251296 kernel: audit: type=1300 audit(1752579415.212:1878): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0001368d0 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:36:55.251349 kernel: audit: type=1327 audit(1752579415.212:1878): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:36:55.251374 kernel: audit: type=1400 audit(1752579415.214:1879): avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:55.251395 kernel: audit: type=1300 audit(1752579415.214:1879): arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0007b2040 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:36:55.251412 kernel: audit: type=1327 audit(1752579415.214:1879): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:36:55.212000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:55.212000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0001368d0 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:36:55.212000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:36:55.214000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:36:55.214000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6 a1=c0007b2040 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:36:55.214000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:36:55.749386 kubelet[2123]: I0715 11:36:55.744970 2123 kubelet_volumes.go:163] "Cleaned up orphaned pod volumes dir" podUID="864a889c-657c-4971-80d3-beba352cc850" path="/var/lib/kubelet/pods/864a889c-657c-4971-80d3-beba352cc850/volumes" Jul 15 11:36:55.968220 kubelet[2123]: I0715 11:36:55.968183 2123 scope.go:117] "RemoveContainer" containerID="ba34298ce0737e135cb5b91b0a5b3b3e3410def895d081baaa6e4b7c9f98c413" Jul 15 11:36:56.047767 env[1251]: time="2025-07-15T11:36:56.047738719Z" level=info msg="CreateContainer within sandbox \"e82c4083b9d102dc0f40bee08b6c53ac3393683f34bc2ac899f4e597ad807f9d\" for container &ContainerMetadata{Name:kube-scheduler,Attempt:2,}" Jul 15 11:36:56.139556 systemd[1]: var-lib-containerd-tmpmounts-containerd\x2dmount2538714068.mount: Deactivated successfully. Jul 15 11:36:56.155567 env[1251]: time="2025-07-15T11:36:56.145909281Z" level=info msg="CreateContainer within sandbox \"e82c4083b9d102dc0f40bee08b6c53ac3393683f34bc2ac899f4e597ad807f9d\" for &ContainerMetadata{Name:kube-scheduler,Attempt:2,} returns container id \"af3bbf15f8e1f2617c0308ade72d797b5d53882f19c71da91005cbfca42b7654\"" Jul 15 11:36:56.156111 env[1251]: time="2025-07-15T11:36:56.156092204Z" level=info msg="StartContainer for \"af3bbf15f8e1f2617c0308ade72d797b5d53882f19c71da91005cbfca42b7654\"" Jul 15 11:36:56.265891 systemd[1]: Started cri-containerd-af3bbf15f8e1f2617c0308ade72d797b5d53882f19c71da91005cbfca42b7654.scope. Jul 15 11:36:56.291650 kernel: audit: type=1400 audit(1752579416.274:1880): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.296617 kernel: audit: type=1400 audit(1752579416.274:1881): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.296673 kernel: audit: type=1400 audit(1752579416.274:1882): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.296692 kernel: audit: type=1400 audit(1752579416.274:1883): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.274000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.274000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit: BPF prog-id=263 op=LOAD Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[7146]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c000197c48 a2=10 a3=1c items=0 ppid=1840 pid=7146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:56.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166336262663135663865316632363137633033303861646537326437 Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[7146]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c0001976b0 a2=3c a3=8 items=0 ppid=1840 pid=7146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:56.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166336262663135663865316632363137633033303861646537326437 Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.275000 audit: BPF prog-id=264 op=LOAD Jul 15 11:36:56.275000 audit[7146]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c0001979d8 a2=78 a3=c000228fb0 items=0 ppid=1840 pid=7146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:56.275000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166336262663135663865316632363137633033303861646537326437 Jul 15 11:36:56.277000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.277000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.277000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.277000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.277000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.277000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.277000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.277000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.277000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.277000 audit: BPF prog-id=265 op=LOAD Jul 15 11:36:56.277000 audit[7146]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c000197770 a2=78 a3=c000228ff8 items=0 ppid=1840 pid=7146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:56.277000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166336262663135663865316632363137633033303861646537326437 Jul 15 11:36:56.282000 audit: BPF prog-id=265 op=UNLOAD Jul 15 11:36:56.282000 audit: BPF prog-id=264 op=UNLOAD Jul 15 11:36:56.282000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.282000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.282000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.282000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.282000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.282000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.282000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.282000 audit[7146]: AVC avc: denied { perfmon } for pid=7146 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.282000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.282000 audit[7146]: AVC avc: denied { bpf } for pid=7146 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:36:56.282000 audit: BPF prog-id=266 op=LOAD Jul 15 11:36:56.282000 audit[7146]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c000197c30 a2=78 a3=c000229408 items=0 ppid=1840 pid=7146 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:56.282000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F6166336262663135663865316632363137633033303861646537326437 Jul 15 11:36:56.382729 env[1251]: time="2025-07-15T11:36:56.319733039Z" level=info msg="StartContainer for \"af3bbf15f8e1f2617c0308ade72d797b5d53882f19c71da91005cbfca42b7654\" returns successfully" Jul 15 11:36:56.527553 systemd[1]: Started sshd@23-139.178.70.108:22-147.75.109.163:53524.service. Jul 15 11:36:56.530000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.108:22-147.75.109.163:53524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:56.559502 sshd[7085]: pam_unix(sshd:session): session closed for user core Jul 15 11:36:56.589000 audit[7085]: USER_END pid=7085 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:56.596000 audit[7085]: CRED_DISP pid=7085 uid=0 auid=500 ses=23 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:56.629000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@22-139.178.70.108:22-147.75.109.163:53512 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:56.631055 systemd[1]: sshd@22-139.178.70.108:22-147.75.109.163:53512.service: Deactivated successfully. Jul 15 11:36:56.631989 systemd[1]: session-23.scope: Deactivated successfully. Jul 15 11:36:56.632014 systemd-logind[1241]: Session 23 logged out. Waiting for processes to exit. Jul 15 11:36:56.632726 systemd-logind[1241]: Removed session 23. Jul 15 11:36:56.731000 audit[7173]: USER_ACCT pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:56.734523 sshd[7173]: Accepted publickey for core from 147.75.109.163 port 53524 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:36:56.734000 audit[7173]: CRED_ACQ pid=7173 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:56.734000 audit[7173]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffc6e679d10 a2=3 a3=0 items=0 ppid=1 pid=7173 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=24 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:36:56.734000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:36:56.738910 sshd[7173]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:36:56.763146 systemd-logind[1241]: New session 24 of user core. Jul 15 11:36:56.763800 systemd[1]: Started session-24.scope. Jul 15 11:36:56.770000 audit[7173]: USER_START pid=7173 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:56.775000 audit[7176]: CRED_ACQ pid=7176 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:58.924310 kubelet[2123]: E0715 11:36:58.883735 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.086s" Jul 15 11:36:59.723209 sshd[7173]: pam_unix(sshd:session): session closed for user core Jul 15 11:36:59.762000 audit[7173]: USER_END pid=7173 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:59.763000 audit[7173]: CRED_DISP pid=7173 uid=0 auid=500 ses=24 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:36:59.780094 systemd[1]: sshd@23-139.178.70.108:22-147.75.109.163:53524.service: Deactivated successfully. Jul 15 11:36:59.784000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@23-139.178.70.108:22-147.75.109.163:53524 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:36:59.789561 systemd[1]: session-24.scope: Deactivated successfully. Jul 15 11:36:59.792355 systemd-logind[1241]: Session 24 logged out. Waiting for processes to exit. Jul 15 11:36:59.803236 systemd-logind[1241]: Removed session 24. Jul 15 11:37:00.841762 kubelet[2123]: I0715 11:37:00.841721 2123 scope.go:117] "RemoveContainer" containerID="754897b2b2122791951574e957ac01f4a1baf982a137e935e8fdd5bfcc8dd0c8" Jul 15 11:37:00.930985 env[1251]: time="2025-07-15T11:37:00.930883169Z" level=info msg="CreateContainer within sandbox \"ee953945c3b30cffd21ce4f184545c9e3482100fc3c6a770f2292614cb1d1424\" for container &ContainerMetadata{Name:tigera-operator,Attempt:2,}" Jul 15 11:37:00.959611 env[1251]: time="2025-07-15T11:37:00.959580577Z" level=info msg="CreateContainer within sandbox \"ee953945c3b30cffd21ce4f184545c9e3482100fc3c6a770f2292614cb1d1424\" for &ContainerMetadata{Name:tigera-operator,Attempt:2,} returns container id \"956145c378ec9fae0de540951270a54264ca97efc741b717a3e67e2f1e9ffb24\"" Jul 15 11:37:00.964510 env[1251]: time="2025-07-15T11:37:00.964483789Z" level=info msg="StartContainer for \"956145c378ec9fae0de540951270a54264ca97efc741b717a3e67e2f1e9ffb24\"" Jul 15 11:37:01.010649 systemd[1]: run-containerd-runc-k8s.io-956145c378ec9fae0de540951270a54264ca97efc741b717a3e67e2f1e9ffb24-runc.GqZpfO.mount: Deactivated successfully. Jul 15 11:37:01.015791 systemd[1]: Started cri-containerd-956145c378ec9fae0de540951270a54264ca97efc741b717a3e67e2f1e9ffb24.scope. Jul 15 11:37:01.036366 kernel: kauditd_printk_skb: 67 callbacks suppressed Jul 15 11:37:01.048686 kernel: audit: type=1400 audit(1752579421.031:1910): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.053694 kernel: audit: type=1400 audit(1752579421.031:1911): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.058563 kernel: audit: type=1400 audit(1752579421.037:1912): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.058611 kernel: audit: type=1400 audit(1752579421.037:1913): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.058631 kernel: audit: type=1400 audit(1752579421.037:1914): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.066315 kernel: audit: type=1400 audit(1752579421.037:1915): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.066400 kernel: audit: type=1400 audit(1752579421.037:1916): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.066430 kernel: audit: type=1400 audit(1752579421.037:1917): avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.084244 kernel: audit: type=1400 audit(1752579421.037:1918): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.084286 kernel: audit: type=1400 audit(1752579421.037:1919): avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.031000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.037000 audit[1]: AVC avc: denied { perfmon } for pid=1 comm="systemd" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.037000 audit[1]: AVC avc: denied { bpf } for pid=1 comm="systemd" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.037000 audit: BPF prog-id=267 op=LOAD Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit[7218]: SYSCALL arch=c000003e syscall=321 success=yes exit=0 a0=f a1=c00011fc48 a2=10 a3=1c items=0 ppid=2253 pid=7218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:01.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935363134356333373865633966616530646535343039353132373061 Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit[7218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=0 a1=c00011f6b0 a2=3c a3=8 items=0 ppid=2253 pid=7218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:01.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935363134356333373865633966616530646535343039353132373061 Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.040000 audit: BPF prog-id=268 op=LOAD Jul 15 11:37:01.040000 audit[7218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011f9d8 a2=78 a3=c000317390 items=0 ppid=2253 pid=7218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:01.040000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935363134356333373865633966616530646535343039353132373061 Jul 15 11:37:01.045000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.045000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.045000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.045000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.045000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.045000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.045000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.045000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.045000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.045000 audit: BPF prog-id=269 op=LOAD Jul 15 11:37:01.045000 audit[7218]: SYSCALL arch=c000003e syscall=321 success=yes exit=18 a0=5 a1=c00011f770 a2=78 a3=c0003173d8 items=0 ppid=2253 pid=7218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:01.045000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935363134356333373865633966616530646535343039353132373061 Jul 15 11:37:01.052000 audit: BPF prog-id=269 op=UNLOAD Jul 15 11:37:01.052000 audit: BPF prog-id=268 op=UNLOAD Jul 15 11:37:01.052000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.052000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.052000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.052000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.052000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.052000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.052000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.052000 audit[7218]: AVC avc: denied { perfmon } for pid=7218 comm="runc" capability=38 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.052000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.052000 audit[7218]: AVC avc: denied { bpf } for pid=7218 comm="runc" capability=39 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=capability2 permissive=0 Jul 15 11:37:01.052000 audit: BPF prog-id=270 op=LOAD Jul 15 11:37:01.052000 audit[7218]: SYSCALL arch=c000003e syscall=321 success=yes exit=16 a0=5 a1=c00011fc30 a2=78 a3=c0003177e8 items=0 ppid=2253 pid=7218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="runc" exe="/run/torcx/unpack/docker/bin/runc" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:01.052000 audit: PROCTITLE proctitle=72756E63002D2D726F6F74002F72756E2F636F6E7461696E6572642F72756E632F6B38732E696F002D2D6C6F67002F72756E2F636F6E7461696E6572642F696F2E636F6E7461696E6572642E72756E74696D652E76322E7461736B2F6B38732E696F2F3935363134356333373865633966616530646535343039353132373061 Jul 15 11:37:01.150703 env[1251]: time="2025-07-15T11:37:01.078371186Z" level=info msg="StartContainer for \"956145c378ec9fae0de540951270a54264ca97efc741b717a3e67e2f1e9ffb24\" returns successfully" Jul 15 11:37:04.758506 systemd[1]: Started sshd@24-139.178.70.108:22-147.75.109.163:50940.service. Jul 15 11:37:04.761000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.108:22-147.75.109.163:50940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:04.973416 update_engine[1243]: I0715 11:37:04.957499 1243 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 15 11:37:05.022407 update_engine[1243]: I0715 11:37:05.022297 1243 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 15 11:37:05.022504 update_engine[1243]: E0715 11:37:05.022425 1243 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 15 11:37:05.030028 update_engine[1243]: I0715 11:37:05.029995 1243 libcurl_http_fetcher.cc:283] No HTTP response, retry 3 Jul 15 11:37:05.315000 audit[7251]: USER_ACCT pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:05.318000 audit[7251]: CRED_ACQ pid=7251 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:05.318000 audit[7251]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffdb7743540 a2=3 a3=0 items=0 ppid=1 pid=7251 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=25 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:05.318000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:37:05.377531 sshd[7251]: Accepted publickey for core from 147.75.109.163 port 50940 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:37:05.326322 sshd[7251]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:37:05.493896 systemd[1]: Started session-25.scope. Jul 15 11:37:05.494010 systemd-logind[1241]: New session 25 of user core. Jul 15 11:37:05.497000 audit[7251]: USER_START pid=7251 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:05.498000 audit[7253]: CRED_ACQ pid=7253 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:06.623968 sshd[7251]: pam_unix(sshd:session): session closed for user core Jul 15 11:37:06.638395 kernel: kauditd_printk_skb: 55 callbacks suppressed Jul 15 11:37:06.649856 kernel: audit: type=1106 audit(1752579426.623:1934): pid=7251 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:06.651702 kernel: audit: type=1104 audit(1752579426.624:1935): pid=7251 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:06.653964 kernel: audit: type=1131 audit(1752579426.631:1936): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.108:22-147.75.109.163:50940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:06.623000 audit[7251]: USER_END pid=7251 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:06.624000 audit[7251]: CRED_DISP pid=7251 uid=0 auid=500 ses=25 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:06.631000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@24-139.178.70.108:22-147.75.109.163:50940 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:06.632260 systemd[1]: sshd@24-139.178.70.108:22-147.75.109.163:50940.service: Deactivated successfully. Jul 15 11:37:06.636381 systemd[1]: session-25.scope: Deactivated successfully. Jul 15 11:37:06.636791 systemd-logind[1241]: Session 25 logged out. Waiting for processes to exit. Jul 15 11:37:06.638890 systemd-logind[1241]: Removed session 25. Jul 15 11:37:08.622000 audit[4635]: AVC avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:37:08.645069 kernel: audit: type=1400 audit(1752579428.622:1937): avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:37:08.645156 kernel: audit: type=1300 audit(1752579428.622:1937): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a24d80 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:37:08.645177 kernel: audit: type=1327 audit(1752579428.622:1937): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:37:08.622000 audit[4635]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a24d80 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:37:08.622000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:37:11.675628 systemd[1]: Started sshd@25-139.178.70.108:22-147.75.109.163:42400.service. Jul 15 11:37:11.699501 kernel: audit: type=1130 audit(1752579431.679:1938): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-139.178.70.108:22-147.75.109.163:42400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:11.679000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-139.178.70.108:22-147.75.109.163:42400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:12.130000 audit[7285]: USER_ACCT pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:12.152972 kernel: audit: type=1101 audit(1752579432.130:1939): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:12.154796 kernel: audit: type=1103 audit(1752579432.134:1940): pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:12.156026 kernel: audit: type=1006 audit(1752579432.134:1941): pid=7285 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=26 res=1 Jul 15 11:37:12.156066 kernel: audit: type=1300 audit(1752579432.134:1941): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec1b36480 a2=3 a3=0 items=0 ppid=1 pid=7285 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:12.156090 kernel: audit: type=1327 audit(1752579432.134:1941): proctitle=737368643A20636F7265205B707269765D Jul 15 11:37:12.134000 audit[7285]: CRED_ACQ pid=7285 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:12.134000 audit[7285]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffec1b36480 a2=3 a3=0 items=0 ppid=1 pid=7285 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=26 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:12.185547 kernel: audit: type=1105 audit(1752579432.166:1942): pid=7285 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:12.185625 kernel: audit: type=1103 audit(1752579432.167:1943): pid=7287 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:12.134000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:37:12.166000 audit[7285]: USER_START pid=7285 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:12.167000 audit[7287]: CRED_ACQ pid=7287 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:12.187437 sshd[7285]: Accepted publickey for core from 147.75.109.163 port 42400 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:37:12.146716 sshd[7285]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:37:12.163841 systemd[1]: Started session-26.scope. Jul 15 11:37:12.164250 systemd-logind[1241]: New session 26 of user core. Jul 15 11:37:13.116000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:13.160116 kernel: audit: type=1400 audit(1752579433.116:1944): avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:13.164119 kernel: audit: type=1300 audit(1752579433.116:1944): arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0007b3740 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:13.116000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0007b3740 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:13.116000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:13.120000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:13.120000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c000a7d880 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:13.120000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:13.120000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:13.120000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a7d8c0 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:13.120000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:13.120000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:13.120000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c000a7d900 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:13.120000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:13.515000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec" dev="sda9" ino=6760 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:37:13.515000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0005ef580 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:13.515000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:13.523000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/opt/libexec/kubernetes/kubelet-plugins/volume/exec/nodeagent~uds" dev="sda9" ino=7284 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=0 Jul 15 11:37:13.523000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=8 a1=c0016dbbd0 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:13.523000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:13.542000 audit[7295]: AVC avc: denied { execute } for pid=7295 comm="kube-controller" name="uds" dev="sda9" ino=7465 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:usr_t:s0 tclass=file permissive=0 Jul 15 11:37:13.542000 audit[7295]: SYSCALL arch=c000003e syscall=59 success=no exit=-13 a0=c0016dbe00 a1=c0017decf0 a2=c001660b00 a3=0 items=0 ppid=7066 pid=7295 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:13.542000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:13.791147 sshd[7285]: pam_unix(sshd:session): session closed for user core Jul 15 11:37:13.881000 audit[7285]: USER_END pid=7285 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:13.883000 audit[7285]: CRED_DISP pid=7285 uid=0 auid=500 ses=26 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:13.909202 systemd[1]: sshd@25-139.178.70.108:22-147.75.109.163:42400.service: Deactivated successfully. Jul 15 11:37:13.914000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@25-139.178.70.108:22-147.75.109.163:42400 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:13.924913 systemd[1]: session-26.scope: Deactivated successfully. Jul 15 11:37:13.929559 systemd-logind[1241]: Session 26 logged out. Waiting for processes to exit. Jul 15 11:37:13.941887 systemd-logind[1241]: Removed session 26. Jul 15 11:37:14.578000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:14.578000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6f a1=c00fded720 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:37:14.578000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:37:14.590000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:14.590000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0127e1f20 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:37:14.590000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:37:14.593000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:14.593000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c003e3c000 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:37:14.593000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:37:14.608000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:14.608000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c003e3c750 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:37:14.608000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:37:14.608000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:14.608000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0127e1f50 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:37:14.608000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:37:14.617000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:14.617000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6d a1=c00fded7a0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:37:14.617000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:37:14.939063 update_engine[1243]: I0715 11:37:14.930307 1243 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 15 11:37:15.069783 update_engine[1243]: I0715 11:37:15.019881 1243 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 15 11:37:15.069783 update_engine[1243]: E0715 11:37:15.028539 1243 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 15 11:37:15.069783 update_engine[1243]: I0715 11:37:15.028613 1243 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 15 11:37:15.069783 update_engine[1243]: I0715 11:37:15.032629 1243 omaha_request_action.cc:621] Omaha request response: Jul 15 11:37:15.069783 update_engine[1243]: E0715 11:37:15.036953 1243 omaha_request_action.cc:640] Omaha request network transfer failed. Jul 15 11:37:15.069783 update_engine[1243]: I0715 11:37:15.037003 1243 action_processor.cc:68] ActionProcessor::ActionComplete: OmahaRequestAction action failed. Aborting processing. Jul 15 11:37:15.069783 update_engine[1243]: I0715 11:37:15.037009 1243 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 15 11:37:15.069783 update_engine[1243]: I0715 11:37:15.037010 1243 update_attempter.cc:306] Processing Done. Jul 15 11:37:15.069783 update_engine[1243]: E0715 11:37:15.041075 1243 update_attempter.cc:619] Update failed. Jul 15 11:37:15.069783 update_engine[1243]: I0715 11:37:15.041092 1243 utils.cc:600] Converting error code 2000 to kActionCodeOmahaErrorInHTTPResponse Jul 15 11:37:15.069783 update_engine[1243]: I0715 11:37:15.041095 1243 payload_state.cc:97] Updating payload state for error code: 37 (kActionCodeOmahaErrorInHTTPResponse) Jul 15 11:37:15.069783 update_engine[1243]: I0715 11:37:15.041098 1243 payload_state.cc:103] Ignoring failures until we get a valid Omaha response. Jul 15 11:37:15.130739 update_engine[1243]: I0715 11:37:15.130656 1243 action_processor.cc:36] ActionProcessor::StartProcessing: OmahaRequestAction Jul 15 11:37:15.184758 update_engine[1243]: I0715 11:37:15.184633 1243 omaha_request_action.cc:270] Posting an Omaha request to disabled Jul 15 11:37:15.184758 update_engine[1243]: I0715 11:37:15.184650 1243 omaha_request_action.cc:271] Request: Jul 15 11:37:15.184758 update_engine[1243]: Jul 15 11:37:15.184758 update_engine[1243]: Jul 15 11:37:15.184758 update_engine[1243]: Jul 15 11:37:15.184758 update_engine[1243]: Jul 15 11:37:15.184758 update_engine[1243]: Jul 15 11:37:15.184758 update_engine[1243]: Jul 15 11:37:15.184758 update_engine[1243]: I0715 11:37:15.184654 1243 libcurl_http_fetcher.cc:47] Starting/Resuming transfer Jul 15 11:37:15.194268 update_engine[1243]: I0715 11:37:15.184790 1243 libcurl_http_fetcher.cc:151] Setting up curl options for HTTP Jul 15 11:37:15.194268 update_engine[1243]: E0715 11:37:15.184859 1243 libcurl_http_fetcher.cc:266] Unable to get http response code: Could not resolve host: disabled Jul 15 11:37:15.194268 update_engine[1243]: I0715 11:37:15.184913 1243 libcurl_http_fetcher.cc:297] Transfer resulted in an error (0), 0 bytes downloaded Jul 15 11:37:15.194268 update_engine[1243]: I0715 11:37:15.184921 1243 omaha_request_action.cc:621] Omaha request response: Jul 15 11:37:15.194268 update_engine[1243]: I0715 11:37:15.184923 1243 action_processor.cc:65] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 15 11:37:15.194268 update_engine[1243]: I0715 11:37:15.184926 1243 action_processor.cc:73] ActionProcessor::ActionComplete: finished last action of type OmahaRequestAction Jul 15 11:37:15.194268 update_engine[1243]: I0715 11:37:15.184928 1243 update_attempter.cc:306] Processing Done. Jul 15 11:37:15.194268 update_engine[1243]: I0715 11:37:15.184931 1243 update_attempter.cc:310] Error event sent. Jul 15 11:37:15.194268 update_engine[1243]: I0715 11:37:15.193712 1243 update_check_scheduler.cc:74] Next update check in 47m21s Jul 15 11:37:15.294000 audit[7298]: NETFILTER_CFG table=filter:155 family=2 entries=32 op=nft_register_rule pid=7298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:15.294000 audit[7298]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fff48fe9670 a2=0 a3=7fff48fe965c items=0 ppid=2231 pid=7298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:15.294000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:15.298000 audit[7298]: NETFILTER_CFG table=nat:156 family=2 entries=40 op=nft_register_rule pid=7298 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:15.298000 audit[7298]: SYSCALL arch=c000003e syscall=46 success=yes exit=12772 a0=3 a1=7fff48fe9670 a2=0 a3=7fff48fe965c items=0 ppid=2231 pid=7298 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:15.298000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:15.340000 audit[7300]: NETFILTER_CFG table=filter:157 family=2 entries=32 op=nft_register_rule pid=7300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:15.340000 audit[7300]: SYSCALL arch=c000003e syscall=46 success=yes exit=11944 a0=3 a1=7fffb7710440 a2=0 a3=7fffb771042c items=0 ppid=2231 pid=7300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:15.340000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:15.344000 audit[7300]: NETFILTER_CFG table=nat:158 family=2 entries=26 op=nft_register_rule pid=7300 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:15.344000 audit[7300]: SYSCALL arch=c000003e syscall=46 success=yes exit=8076 a0=3 a1=7fffb7710440 a2=0 a3=0 items=0 ppid=2231 pid=7300 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:15.344000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:15.377476 locksmithd[1296]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_REPORTING_ERROR_EVENT" NewVersion=0.0.0 NewSize=0 Jul 15 11:37:15.377476 locksmithd[1296]: LastCheckedTime=0 Progress=0 CurrentOperation="UPDATE_STATUS_IDLE" NewVersion=0.0.0 NewSize=0 Jul 15 11:37:17.333974 kubelet[2123]: E0715 11:37:17.321510 2123 kubelet.go:2627] "Housekeeping took longer than expected" err="housekeeping took too long" expected="1s" actual="1.316s" Jul 15 11:37:19.058068 systemd[1]: Started sshd@26-139.178.70.108:22-147.75.109.163:48226.service. Jul 15 11:37:19.557605 kernel: kauditd_printk_skb: 52 callbacks suppressed Jul 15 11:37:19.575253 kernel: audit: type=1130 audit(1752579439.096:1964): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-139.178.70.108:22-147.75.109.163:48226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:19.096000 audit[1]: SERVICE_START pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-139.178.70.108:22-147.75.109.163:48226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:37:19.919000 audit[7321]: USER_ACCT pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:19.935101 kernel: audit: type=1101 audit(1752579439.919:1965): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:accounting grantors=pam_access,pam_unix,pam_faillock,pam_permit acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:19.940199 kernel: audit: type=1103 audit(1752579439.931:1966): pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:19.947538 kernel: audit: type=1006 audit(1752579439.931:1967): pid=7321 uid=0 subj=system_u:system_r:kernel_t:s0 old-auid=4294967295 auid=500 tty=(none) old-ses=4294967295 ses=27 res=1 Jul 15 11:37:19.947564 kernel: audit: type=1300 audit(1752579439.931:1967): arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed69ccd00 a2=3 a3=0 items=0 ppid=1 pid=7321 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.947586 kernel: audit: type=1327 audit(1752579439.931:1967): proctitle=737368643A20636F7265205B707269765D Jul 15 11:37:19.931000 audit[7321]: CRED_ACQ pid=7321 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:19.931000 audit[7321]: SYSCALL arch=c000003e syscall=1 success=yes exit=3 a0=5 a1=7ffed69ccd00 a2=3 a3=0 items=0 ppid=1 pid=7321 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=27 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:19.931000 audit: PROCTITLE proctitle=737368643A20636F7265205B707269765D Jul 15 11:37:20.080615 sshd[7321]: Accepted publickey for core from 147.75.109.163 port 48226 ssh2: RSA SHA256:+CaGzVJdBS9axnUtiVJoq/0yBbuuMx53Aeb6f4RIUIo Jul 15 11:37:19.960524 sshd[7321]: pam_unix(sshd:session): session opened for user core(uid=500) by (uid=0) Jul 15 11:37:20.437710 systemd-logind[1241]: New session 27 of user core. Jul 15 11:37:20.485199 kernel: audit: type=1105 audit(1752579440.461:1968): pid=7321 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:20.485261 kernel: audit: type=1103 audit(1752579440.466:1969): pid=7323 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:20.461000 audit[7321]: USER_START pid=7321 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_open grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:20.466000 audit[7323]: CRED_ACQ pid=7323 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:37:20.453635 systemd[1]: Started session-27.scope. Jul 15 11:37:21.833000 audit[7335]: NETFILTER_CFG table=filter:159 family=2 entries=20 op=nft_register_rule pid=7335 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:21.975943 kernel: audit: type=1325 audit(1752579441.833:1970): table=filter:159 family=2 entries=20 op=nft_register_rule pid=7335 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:21.984877 kernel: audit: type=1300 audit(1752579441.833:1970): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc6d708e80 a2=0 a3=7ffc6d708e6c items=0 ppid=2231 pid=7335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:21.833000 audit[7335]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffc6d708e80 a2=0 a3=7ffc6d708e6c items=0 ppid=2231 pid=7335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:21.833000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:21.845000 audit[7335]: NETFILTER_CFG table=nat:160 family=2 entries=110 op=nft_register_chain pid=7335 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:37:21.845000 audit[7335]: SYSCALL arch=c000003e syscall=46 success=yes exit=50988 a0=3 a1=7ffc6d708e80 a2=0 a3=7ffc6d708e6c items=0 ppid=2231 pid=7335 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:37:21.845000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:37:25.600000 audit[5002]: AVC avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:37:25.757756 kernel: kauditd_printk_skb: 4 callbacks suppressed Jul 15 11:37:25.773653 kernel: audit: type=1400 audit(1752579445.600:1972): avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:37:25.775362 kernel: audit: type=1300 audit(1752579445.600:1972): arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001577760 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:37:25.776856 kernel: audit: type=1327 audit(1752579445.600:1972): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:37:25.600000 audit[5002]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c001577760 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:37:25.600000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:37:55.262000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:55.511924 kernel: audit: type=1400 audit(1752579475.262:1973): avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:55.522965 kernel: audit: type=1300 audit(1752579475.262:1973): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0020b57c0 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:55.526457 kernel: audit: type=1327 audit(1752579475.262:1973): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:55.526493 kernel: audit: type=1400 audit(1752579475.287:1974): avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:55.532692 kernel: audit: type=1300 audit(1752579475.287:1974): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001e5b440 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:55.535570 kernel: audit: type=1327 audit(1752579475.287:1974): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:55.262000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c0020b57c0 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:55.262000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:37:55.287000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:37:55.287000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c001e5b440 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:37:55.287000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:08.696000 audit[4635]: AVC avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:38:09.331875 kernel: audit: type=1400 audit(1752579488.696:1975): avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:38:09.410289 kernel: audit: type=1300 audit(1752579488.696:1975): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00232ffa0 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:38:09.422553 kernel: audit: type=1327 audit(1752579488.696:1975): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:38:08.696000 audit[4635]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c00232ffa0 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:38:08.696000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:38:10.452000 audit[7370]: NETFILTER_CFG table=filter:161 family=2 entries=8 op=nft_register_rule pid=7370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:10.519614 kernel: audit: type=1325 audit(1752579490.452:1976): table=filter:161 family=2 entries=8 op=nft_register_rule pid=7370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:10.696073 kernel: audit: type=1300 audit(1752579490.452:1976): arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffeae066f20 a2=0 a3=7ffeae066f0c items=0 ppid=2231 pid=7370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:10.703987 kernel: audit: type=1327 audit(1752579490.452:1976): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:10.714492 kernel: audit: type=1325 audit(1752579490.463:1977): table=nat:162 family=2 entries=86 op=nft_unregister_chain pid=7370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:10.722996 kernel: audit: type=1300 audit(1752579490.463:1977): arch=c000003e syscall=46 success=yes exit=26100 a0=3 a1=7ffeae066f20 a2=0 a3=7ffeae066f0c items=0 ppid=2231 pid=7370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:10.723041 kernel: audit: type=1327 audit(1752579490.463:1977): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:10.452000 audit[7370]: SYSCALL arch=c000003e syscall=46 success=yes exit=3016 a0=3 a1=7ffeae066f20 a2=0 a3=7ffeae066f0c items=0 ppid=2231 pid=7370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:10.452000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:10.463000 audit[7370]: NETFILTER_CFG table=nat:162 family=2 entries=86 op=nft_unregister_chain pid=7370 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:10.463000 audit[7370]: SYSCALL arch=c000003e syscall=46 success=yes exit=26100 a0=3 a1=7ffeae066f20 a2=0 a3=7ffeae066f0c items=0 ppid=2231 pid=7370 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:10.463000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:13.247000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:13.770297 kernel: audit: type=1400 audit(1752579493.247:1978): avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:13.247000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=c a1=c000debda0 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:38:13.247000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:13.274000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:13.274000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=d a1=c000debe20 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:38:13.274000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:13.412000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:13.412000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=10 a1=c00007b080 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:38:13.412000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:13.477000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:13.477000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c00007b120 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:38:13.477000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:14.651078 kernel: kauditd_printk_skb: 11 callbacks suppressed Jul 15 11:38:14.744614 kernel: audit: type=1400 audit(1752579494.647:1982): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:14.754954 kernel: audit: type=1300 audit(1752579494.647:1982): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c010e51520 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:38:14.755023 kernel: audit: type=1327 audit(1752579494.647:1982): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:38:14.763783 kernel: audit: type=1400 audit(1752579494.677:1983): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:14.772231 kernel: audit: type=1300 audit(1752579494.677:1983): arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0145ad860 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:38:14.778001 kernel: audit: type=1327 audit(1752579494.677:1983): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:38:14.778050 kernel: audit: type=1400 audit(1752579494.688:1984): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:14.783975 kernel: audit: type=1300 audit(1752579494.688:1984): arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0115e0f30 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:38:14.786087 kernel: audit: type=1327 audit(1752579494.688:1984): proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:38:14.786141 kernel: audit: type=1400 audit(1752579494.688:1985): avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:14.647000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:14.647000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c010e51520 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:38:14.647000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:38:14.677000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:14.677000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=74 a1=c0145ad860 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:38:14.677000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:38:14.688000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/apiserver.crt" dev="sda9" ino=6729 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:14.688000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6c a1=c0115e0f30 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:38:14.688000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:38:14.688000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:14.688000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c010e51580 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:38:14.688000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:38:14.702000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-client.crt" dev="sda9" ino=6735 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:14.702000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0145ad8f0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:38:14.702000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:38:14.784000 audit[1980]: AVC avc: denied { watch } for pid=1980 comm="kube-apiserver" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:14.784000 audit[1980]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=6b a1=c0145ad9b0 a2=fc6 a3=0 items=0 ppid=1820 pid=1980 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-apiserver" exe="/usr/local/bin/kube-apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c295,c322 key=(null) Jul 15 11:38:14.784000 audit: PROCTITLE proctitle=6B7562652D617069736572766572002D2D6164766572746973652D616464726573733D3133392E3137382E37302E313038002D2D616C6C6F772D70726976696C656765643D74727565002D2D617574686F72697A6174696F6E2D6D6F64653D4E6F64652C52424143002D2D636C69656E742D63612D66696C653D2F6574632F6B Jul 15 11:38:16.510000 audit[7374]: NETFILTER_CFG table=filter:163 family=2 entries=9 op=nft_register_rule pid=7374 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:16.510000 audit[7374]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffd1702a540 a2=0 a3=7ffd1702a52c items=0 ppid=2231 pid=7374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.510000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:16.517000 audit[7374]: NETFILTER_CFG table=nat:164 family=2 entries=55 op=nft_unregister_chain pid=7374 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:16.517000 audit[7374]: SYSCALL arch=c000003e syscall=46 success=yes exit=16780 a0=3 a1=7ffd1702a540 a2=0 a3=7ffd1702a52c items=0 ppid=2231 pid=7374 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.517000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:16.628000 audit[7376]: NETFILTER_CFG table=filter:165 family=2 entries=10 op=nft_register_rule pid=7376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:16.628000 audit[7376]: SYSCALL arch=c000003e syscall=46 success=yes exit=3760 a0=3 a1=7ffe2d7b53b0 a2=0 a3=7ffe2d7b539c items=0 ppid=2231 pid=7376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.628000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:16.633000 audit[7376]: NETFILTER_CFG table=nat:166 family=2 entries=60 op=nft_unregister_chain pid=7376 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:16.633000 audit[7376]: SYSCALL arch=c000003e syscall=46 success=yes exit=19460 a0=3 a1=7ffe2d7b53b0 a2=0 a3=7ffe2d7b539c items=0 ppid=2231 pid=7376 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:16.633000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:17.625000 audit[7378]: NETFILTER_CFG table=filter:167 family=2 entries=11 op=nft_register_rule pid=7378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:17.625000 audit[7378]: SYSCALL arch=c000003e syscall=46 success=yes exit=4504 a0=3 a1=7fff0611e880 a2=0 a3=7fff0611e86c items=0 ppid=2231 pid=7378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.625000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:17.629000 audit[7378]: NETFILTER_CFG table=nat:168 family=2 entries=53 op=nft_unregister_chain pid=7378 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:17.629000 audit[7378]: SYSCALL arch=c000003e syscall=46 success=yes exit=16012 a0=3 a1=7fff0611e880 a2=0 a3=7fff0611e86c items=0 ppid=2231 pid=7378 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:17.629000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:19.545000 audit[7380]: NETFILTER_CFG table=filter:169 family=2 entries=15 op=nft_register_rule pid=7380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:19.545000 audit[7380]: SYSCALL arch=c000003e syscall=46 success=yes exit=6736 a0=3 a1=7fff7c3c40b0 a2=0 a3=7fff7c3c409c items=0 ppid=2231 pid=7380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:19.545000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:19.553000 audit[7380]: NETFILTER_CFG table=nat:170 family=2 entries=61 op=nft_unregister_chain pid=7380 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:19.553000 audit[7380]: SYSCALL arch=c000003e syscall=46 success=yes exit=14220 a0=3 a1=7fff7c3c40b0 a2=0 a3=7fff7c3c409c items=0 ppid=2231 pid=7380 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:19.553000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:22.912876 kernel: kauditd_printk_skb: 32 callbacks suppressed Jul 15 11:38:23.017543 kernel: audit: type=1325 audit(1752579502.895:1996): table=filter:171 family=2 entries=19 op=nft_register_rule pid=7391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:23.026980 kernel: audit: type=1300 audit(1752579502.895:1996): arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd41e53550 a2=0 a3=7ffd41e5353c items=0 ppid=2231 pid=7391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.029631 kernel: audit: type=1327 audit(1752579502.895:1996): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:23.035522 kernel: audit: type=1325 audit(1752579502.912:1997): table=nat:172 family=2 entries=45 op=nft_unregister_chain pid=7391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:23.037541 kernel: audit: type=1300 audit(1752579502.912:1997): arch=c000003e syscall=46 success=yes exit=12940 a0=3 a1=7ffd41e53550 a2=0 a3=7ffd41e5353c items=0 ppid=2231 pid=7391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.040353 kernel: audit: type=1327 audit(1752579502.912:1997): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:23.043658 kernel: audit: type=1325 audit(1752579502.937:1998): table=filter:173 family=2 entries=21 op=nft_register_rule pid=7393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:23.043686 kernel: audit: type=1300 audit(1752579502.937:1998): arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffafc4fa40 a2=0 a3=7fffafc4fa2c items=0 ppid=2231 pid=7393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:23.045288 kernel: audit: type=1327 audit(1752579502.937:1998): proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:23.051088 kernel: audit: type=1325 audit(1752579502.948:1999): table=nat:174 family=2 entries=43 op=nft_unregister_chain pid=7393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:22.895000 audit[7391]: NETFILTER_CFG table=filter:171 family=2 entries=19 op=nft_register_rule pid=7391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:22.895000 audit[7391]: SYSCALL arch=c000003e syscall=46 success=yes exit=7480 a0=3 a1=7ffd41e53550 a2=0 a3=7ffd41e5353c items=0 ppid=2231 pid=7391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:22.895000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:22.912000 audit[7391]: NETFILTER_CFG table=nat:172 family=2 entries=45 op=nft_unregister_chain pid=7391 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:22.912000 audit[7391]: SYSCALL arch=c000003e syscall=46 success=yes exit=12940 a0=3 a1=7ffd41e53550 a2=0 a3=7ffd41e5353c items=0 ppid=2231 pid=7391 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:22.912000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:22.937000 audit[7393]: NETFILTER_CFG table=filter:173 family=2 entries=21 op=nft_register_rule pid=7393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:22.937000 audit[7393]: SYSCALL arch=c000003e syscall=46 success=yes exit=8224 a0=3 a1=7fffafc4fa40 a2=0 a3=7fffafc4fa2c items=0 ppid=2231 pid=7393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:22.937000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:22.948000 audit[7393]: NETFILTER_CFG table=nat:174 family=2 entries=43 op=nft_unregister_chain pid=7393 subj=system_u:system_r:kernel_t:s0 comm="iptables-restor" Jul 15 11:38:22.948000 audit[7393]: SYSCALL arch=c000003e syscall=46 success=yes exit=12172 a0=3 a1=7fffafc4fa40 a2=0 a3=7fffafc4fa2c items=0 ppid=2231 pid=7393 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="iptables-restor" exe="/usr/sbin/xtables-nft-multi" subj=system_u:system_r:kernel_t:s0 key=(null) Jul 15 11:38:22.948000 audit: PROCTITLE proctitle=69707461626C65732D726573746F7265002D770035002D5700313030303030002D2D6E6F666C757368002D2D636F756E74657273 Jul 15 11:38:25.668000 audit[5002]: AVC avc: denied { watch } for pid=5002 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_30_12.3918653822/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c312,c815 tclass=file permissive=0 Jul 15 11:38:25.668000 audit[5002]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=7 a1=c000ad8000 a2=fc6 a3=0 items=0 ppid=4860 pid=5002 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c312,c815 key=(null) Jul 15 11:38:25.668000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:38:55.414000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:55.727372 kernel: kauditd_printk_skb: 5 callbacks suppressed Jul 15 11:38:55.773249 kernel: audit: type=1400 audit(1752579535.414:2001): avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/front-proxy-ca.crt" dev="sda9" ino=6733 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:55.778404 kernel: audit: type=1300 audit(1752579535.414:2001): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002ee92c0 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:38:55.781921 kernel: audit: type=1327 audit(1752579535.414:2001): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:55.781962 kernel: audit: type=1400 audit(1752579535.419:2002): avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:55.784251 kernel: audit: type=1300 audit(1752579535.419:2002): arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002d4e120 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:38:55.786253 kernel: audit: type=1327 audit(1752579535.419:2002): proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:55.414000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002ee92c0 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:38:55.414000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:38:55.419000 audit[7066]: AVC avc: denied { watch } for pid=7066 comm="kube-controller" path="/etc/kubernetes/pki/ca.crt" dev="sda9" ino=6727 scontext=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=0 Jul 15 11:38:55.419000 audit[7066]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=9 a1=c002d4e120 a2=fc6 a3=0 items=0 ppid=1797 pid=7066 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="kube-controller" exe="/usr/local/bin/kube-controller-manager" subj=system_u:system_r:svirt_lxc_net_t:s0:c143,c674 key=(null) Jul 15 11:38:55.419000 audit: PROCTITLE proctitle=6B7562652D636F6E74726F6C6C65722D6D616E61676572002D2D616C6C6F636174652D6E6F64652D63696472733D74727565002D2D61757468656E7469636174696F6E2D6B756265636F6E6669673D2F6574632F6B756265726E657465732F636F6E74726F6C6C65722D6D616E616765722E636F6E66002D2D617574686F7269 Jul 15 11:39:09.078000 audit[4635]: AVC avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:39:09.273375 kernel: audit: type=1400 audit(1752579549.078:2003): avc: denied { watch } for pid=4635 comm="apiserver" path="/calico-apiserver-certs/..2025_07_15_11_29_47.4097491360/tls.crt" dev="tmpfs" ino=3 scontext=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 tcontext=system_u:object_r:svirt_lxc_file_t:s0:c326,c566 tclass=file permissive=0 Jul 15 11:39:09.288546 kernel: audit: type=1300 audit(1752579549.078:2003): arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002b00120 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:39:09.288591 kernel: audit: type=1327 audit(1752579549.078:2003): proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:39:09.078000 audit[4635]: SYSCALL arch=c000003e syscall=254 success=no exit=-13 a0=a a1=c002b00120 a2=fc6 a3=0 items=0 ppid=4532 pid=4635 auid=4294967295 uid=10001 gid=10001 euid=10001 suid=10001 fsuid=10001 egid=10001 sgid=10001 fsgid=10001 tty=(none) ses=4294967295 comm="apiserver" exe="/code/apiserver" subj=system_u:system_r:svirt_lxc_net_t:s0:c326,c566 key=(null) Jul 15 11:39:09.078000 audit: PROCTITLE proctitle=2F636F64652F617069736572766572002D2D7365637572652D706F72743D35343433002D2D746C732D707269766174652D6B65792D66696C653D2F63616C69636F2D6170697365727665722D63657274732F746C732E6B6579002D2D746C732D636572742D66696C653D2F63616C69636F2D6170697365727665722D63657274 Jul 15 11:39:09.791365 sshd[7321]: pam_unix(sshd:session): session closed for user core Jul 15 11:39:09.852000 audit[7321]: USER_END pid=7321 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:39:09.861404 kernel: audit: type=1106 audit(1752579549.852:2004): pid=7321 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:session_close grantors=pam_loginuid,pam_env,pam_lastlog,pam_limits,pam_env,pam_unix,pam_permit,pam_systemd,pam_mail acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:39:09.861465 kernel: audit: type=1104 audit(1752579549.856:2005): pid=7321 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:39:09.856000 audit[7321]: CRED_DISP pid=7321 uid=0 auid=500 ses=27 subj=system_u:system_r:kernel_t:s0 msg='op=PAM:setcred grantors=pam_env,pam_faillock,pam_unix acct="core" exe="/usr/sbin/sshd" hostname=147.75.109.163 addr=147.75.109.163 terminal=ssh res=success' Jul 15 11:39:09.869671 systemd[1]: sshd@26-139.178.70.108:22-147.75.109.163:48226.service: Deactivated successfully. Jul 15 11:39:09.882162 kernel: audit: type=1131 audit(1752579549.873:2006): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-139.178.70.108:22-147.75.109.163:48226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:39:09.873000 audit[1]: SERVICE_STOP pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:kernel_t:s0 msg='unit=sshd@26-139.178.70.108:22-147.75.109.163:48226 comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success' Jul 15 11:39:09.881902 systemd[1]: session-27.scope: Deactivated successfully. Jul 15 11:39:09.882009 systemd[1]: session-27.scope: Consumed 10.603s CPU time. Jul 15 11:39:09.888858 systemd-logind[1241]: Session 27 logged out. Waiting for processes to exit. Jul 15 11:39:09.918180 systemd-logind[1241]: Removed session 27.